microsoft/kiota-serialization-text
Clear licensing, documentation, source tests, and release notes support adoption. Microsoft ownership and an active repository help offset the small recent contribution base, but workflow permissions and action pinning still need attention.
70%
Total Score
80
100
100
100
Health Score Breakdown
All one recent commit came from a single contributor, concentrating observed activity; Microsoft organization backing provides some handoff capacity but does not remove the maintenance concern.
Only one commit was recorded in the last three months, which shows limited recent development activity and adds some maintenance caution despite the recent release history.
The audit found a high-confidence bot-condition issue, all 7 analyzed actions are unpinned, and 3 of 4 workflows grant top-level write permissions. No untrusted checkout or script-injection path was found, so this is a caution rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Microsoft Graph Client Tooling |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^1.6 || ^2 | — | — |
microsoft/kiota-abstractions Version ^2.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 24 days ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.