@octokit/endpoint
Turns REST API endpoints into generic request options
85
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
gitHead linked
Maintainers
octokitbot
Keywords
octokitgithubapirest
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | source-size-tripled | AI (source-diff): Size increase is explained by adoption of Pika Pack multi-format build pipeline producing dist-node, dist-web, and bundled web variants. Legitimate architectural change. | ai | |
| provenance | missing-githead | AI (provenance): Octokit migrated to @pika/pack build system in this version; gitHead absence is a known side effect of the Pika publish flow, not a sign of tampering. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New files are @pika/pack dist outputs (dist-node, dist-web, dist-types, dist-src) — intentional multi-format distribution, confirmed by pika:true in package.json. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): deepmerge is a well-known, widely-used utility package pinned to an exact version (2.2.1). Its use is appropriate for a package that merges REST API request options. No malicious signal. | ai | |
| provenance | publisher-changed | AI (provenance): gr2m is the canonical Octokit maintainer and package author; octokitbot was an automation account. The transition back to the primary maintainer is legitimate and expected for this package. | ai | |
| provenance | no-provenance | AI (provenance): Package predates Sigstore provenance on npm (published 2019); absence of attestation is expected for this era and not a risk signal. | ai | |
| dependencies | unvetted-dep:universal-user-agent | AI (dependencies): universal-user-agent is a well-known Octokit ecosystem utility for user-agent string generation; stable dependency across all @octokit/* packages. | ai |
Versions (showing 85 of 85)
| Version | Deps | Published |
|---|---|---|
| 11.0.3 | 2 / 9 | |
| 11.0.2 | 2 / 10 | |
| 11.0.1 | 2 / 10 | |
| 11.0.0 | 2 / 10 | |
| 10.1.4 | 2 / 10 | |
| 10.1.3 | 2 / 10 | |
| 9.0.6 | 2 / 10 | |
| 9.0.4 | 2 / 10 | |
| 9.0.3 | 2 / 10 | |
| 9.0.2 | 3 / 10 | |
| 9.0.1 | 3 / 10 | |
| 9.0.0 | 3 / 10 | |
| 8.0.1 | 3 / 10 | |
| 8.0.0 | 3 / 10 | |
| 7.0.6 | 3 / 10 | |
| 7.0.5 | 3 / 11 | |
| 7.0.4 | 3 / 11 | |
| 7.0.3 | 3 / 11 | |
| 7.0.2 | 3 / 11 | |
| 7.0.1 | 3 / 11 | |
| 7.0.0 | 3 / 11 | |
| 6.0.12 | 3 / 11 | |
| 6.0.11 | 3 / 11 | |
| 6.0.10 | 3 / 11 | |
| 6.0.9 | 3 / 11 | |
| 6.0.8 | 3 / 11 | |
| 6.0.7 | 3 / 11 | |
| 6.0.6 | 3 / 11 | |
| 6.0.5 | 3 / 11 | |
| 6.0.4 | 3 / 11 | |
| 6.0.3 | 3 / 11 | |
| 6.0.2 | 3 / 11 | |
| 6.0.1 | 3 / 11 | |
| 6.0.0 | 3 / 11 | |
| 5.5.3 | 3 / 11 | |
| 5.5.2 | 3 / 11 | |
| 5.5.1 | 3 / 11 | |
| 5.5.0 | 3 / 11 | |
| 5.4.1 | 2 / 18 | |
| 5.4.0 | 2 / 18 | |
| 5.3.6 | 2 / 16 | |
| 5.3.5 | 2 / 16 | |
| 5.3.4 | 2 / 16 | |
| 5.3.3 | 3 / 17 | |
| 5.3.2 | 4 / 19 | |
| 5.3.1 | 4 / 19 | |
| 5.3.0 | 4 / 19 | |
| 5.2.2 | 4 / 19 | |
| 5.2.1 | 4 / 19 | |
| 5.2.0 | 4 / 19 | |
| 5.1.8 | 4 / 19 | |
| 5.1.7 | 4 / 19 | |
| 5.1.6 | 4 / 21 | |
| 5.1.5 | 4 / 21 | |
| 5.1.4 | 4 / 24 | |
| 5.1.3 | 4 / 24 | |
| 5.1.2 | 4 / 24 | |
| 5.1.1 | 4 / 24 | |
| 5.1.0 | 4 / 24 | |
| 5.0.1 | 4 / 19 | |
| 5.0.0 | 4 / 18 | |
| 4.2.2 | 4 / 15 | |
| 4.2.1 | 4 / 15 | |
| 4.2.0 | 4 / 15 | |
| 4.1.1 | 4 / 20 | |
| 4.1.0 | 4 / 20 | |
| 4.0.0 | 4 / 15 | |
| 3.2.3 | 4 / 15 | |
| 3.2.2 | 4 / 15 | |
| 3.2.1 | 4 / 15 | |
| 3.2.0 | 4 / 15 | |
| 3.1.3 | 4 / 15 | |
| 3.1.2 | 4 / 15 | |
| 3.1.1 | 4 / 15 | |
| 3.1.0 | 4 / 15 | |
| 3.0.1 | 4 / 15 | |
| 3.0.0 | 4 / 15 | |
| 2.1.0 | 4 / 15 | |
| 2.0.2 | 4 / 15 | |
| 2.0.1 | 4 / 15 | |
| 2.0.0 | 3 / 15 | |
| 1.3.0 | 3 / 15 | |
| 1.2.0 | 3 / 15 | |
| 1.1.0 | 3 / 8 | |
| 1.0.0 | 3 / 8 |