Implementation of Kiota serialization abstractions using Json.
73%
Total Score
caution
Regular releases and Microsoft backing support adoption, but recent repository work is concentrated in one contributor.
All recorded commits in the last three months came from one contributor. Microsoft organizational backing reduces the risk of a single-person project, but no second active contributor is shown to provide direct redundancy.
Only one commit from one active maintainer was recorded in the last three months. The regular release history helps, but this recent activity level is thin and lowers confidence in near-term maintenance capacity.
All four workflows were analyzed and all seven action references are pinned, with no untrusted checkout or script-injection path found. However, three workflows grant top-level write permissions and the audit found one high-confidence bot-conditions issue, so workflow hygiene is a caution rather than a clean bill of health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.6 || ^2 || ^3 | — | — |
microsoft/kiota-abstractions Version ^2.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.