The stable major version, release notes, and clear README help consumers understand the package. Its small dependency surface and organization-backed repository reduce adoption friction, but no specific upgrade path is evident.
44%
Total Score
50
100
86
67
The package has had no registry release since 28 April 2023, about 3 years and 5 months before collection, indicating a substantial maintenance pause despite six releases overall.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.
The repository has no security policy. This reduces disclosure transparency, although the package's long maintenance pause is the more significant concern.
The single workflow was fully analyzed, but both action references were unpinned and the audit found a high-confidence unpinned container image. This is a supply-chain hygiene weakness, though no untrusted checkout or script injection was observed.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
leafs/http Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.