npm package report
Is @octokit/rest safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
@octokit/rest · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 15 graph-tracked dependencies · provenance: verified (sigstore)
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
apidoc@^0.17.6clean
atob@^2.1.2clean
atob-lite@^2.0.0clean
before-after-hook@^1.1.0clean
btoa-lite@^1.0.0clean
bundlesize@^0.16.0clean
chai@^4.1.2clean
compression-webpack-plugin@^1.1.6clean
coveralls@^3.0.0clean
cypress@^1.4.2clean
debug@^3.1.0clean
deprecation@^1.0.1clean
dotenv@^4.0.0clean
esbuild@^0.17.19clean
fetch-mock@^10.0.0clean
PACKAGE @octokit/restECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
73M
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
15
Baked snapshot · run a live check for the current verdict · browse all packages