Package Health

Microsoft.OpenApi.Kiota.Builder

The core engine behind the OpenAPI based client generator.

Latest 1.35.0NuGetNuGet

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Are you affected? Scan for Free

Health Score Breakdown

Licensecaution

Neither a declared license nor a license file was found for the package, creating a genuine licensing and transparency gap for downstream users.

Release historycaution

The package has a substantial history of 46 releases over 1,557 days, but it has had zero releases in the last 12 months; this is a maintenance concern, although the active repository provides compensating evidence.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent; the monorepo context makes a subpackage explanation plausible but does not eliminate the verification gap.

Token permissionscaution

Seven workflows lack top-level permissions and four declare top-level write permissions, which weakens least-privilege transparency even though two workflows are read-only and some permissions are job-scoped.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-15873
Microsoft.OpenApi.Kiota.Builder is vulnerable to Path Traversal in versions 0.0.1 - 1.32.4.
0.0.1 - 1.32.4
High
AIKIDO-2026-687567
Microsoft.OpenApi.Kiota.Builder is vulnerable to Path Traversal in versions 0.0.1 - 1.32.4.
0.0.1 - 1.32.4
Critical
AIKIDO-2026-893593
Microsoft.OpenApi.Kiota.Builder is vulnerable to Path Traversal in versions 0.0.1 - 1.32.4.
0.0.1 - 1.32.4
Critical
AIKIDO-2026-117504
Microsoft.OpenApi.Kiota.Builder is vulnerable to Command Injection in versions 0.0.1 - 1.32.4.
0.0.1 - 1.32.4
Critical
AIKIDO-2026-272541
Microsoft.OpenApi.Kiota.Builder is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.1 - 1.32.4.
0.0.1 - 1.32.4
High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
asynckeyedlock
Version [8.0.2, )
—
—
dotnet.glob
Version [3.1.3, )
—
—
microsoft.declarativeagents.manifest
Version [5.0.0-rc.2, )
—
—
microsoft.extensions.logging.abstractions
Version [10.0.11, )
—
—
microsoft.kiota.bundle
Version [2.0.0, )
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform