byjg/webrequest
It has a clear MIT license, extensive tests, release notes, and security scanning. The single maintainer and unpinned workflow actions leave less depth and reproducibility than stronger projects.
72%
Total Score
50
100
94
75
Health Score Breakdown
Only one account has registry publishing access, which limits publishing redundancy, although the linked repository and package namespace are aligned with that owner.
The project has existed since July 2015 with 19 releases, but only one release appeared in the last 12 months, indicating a slower cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently quiet development despite the recent stable release.
The sole workflow was fully analyzed with no audit findings or untrusted execution paths, but all four action references are unpinned, reducing build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 João Gilberto Magalhães |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 byjg/uri Version ^6.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0|^1.1 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.