Package Description
82%
Total Score
67
100
100
All four recent commits came from one contributor, giving the project a concentrated recent commit base. The organization backing helps with handoff potential, but no second recent contributor is shown to offset the concentration.
Only four commits were made in the last three months, with one active maintainer. That is a caution for maintenance capacity, although the recent release and pull-request activity provide some counterevidence.
All six workflows were analyzed successfully with no audit findings, untrusted checkouts, or script injections. Five workflows use top-level write permissions and 8 of 12 action references are unpinned, which are hygiene concerns but not severe here because no untrusted trigger or sink was found.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10625 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. Akavache is vulnerable to Path Traversal in versions 11.0.1 - 11.3.2. | 11.0.1 - 11.3.2 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
microsoft.bcl.asyncinterfaces Version [10.0.10, ) | — | — |
reactiveui.primitives Version [7.1.0, ) | — | — |
splat.builder Version [21.0.0, ) | — | — |
microsoft.bcl.timeprovider Version [10.0.10, ) | — | — |
system.memory Version [4.6.3, ) | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.