Get a Demo

Patch

com.squareup.okio:okio 2.8.0

Package Version

com.squareup.okio:okio 2.8.0

Github Repository

Package Version Scores

Overall

0

/10

Security

8

Activity

7

Popularity

8

Quality

7

Quality

Pull Requests from Bots

Pull requests from bot accounts indicate that the project is using automation for development tasks.

Quality

Pull Requests from Bots

Pull requests from bot accounts indicate that the project is using automation for development tasks.

Endor Patches

67fea1ea15923ab69cfac18c

CVEs Fixed

C

0

H

1

+20

-2

Vulnerabilities Fixed

Okio Signed to Unsigned Conversion Error vulnerability

Get Your First 3 Patches Free

Fix Without Upgrading

Detect compatible fix

Apply safe remediation

Fix with a single pull request

References

Basic Information

Ecosystem

Release Date

March 23, 2026

LINES OF CODE CHANGED

+20

-2

-

on latest patch

License

Patch Available

Get Your First 3 Patches Free

Secure your app without upgrading.

Fix Without Upgrading

{
"items": [
{
"title": "Recent Commit Activity",
"description": "Recent commit activity indicates that the project is active",
"category": "activity",
"type": "upscore"
},
{
"title": "Most Commits are Verified",
"description": "A large fraction of the commits in this repository are verified; this shows that security best practices are followed",
"category": "code quality",
"type": "upscore"
},
{
"title": "Regular Code Review",
"description": "A large faction of the commits in this repository are associated with a pull request; this shows that development best practices are followed",
"category": "code quality",
"type": "upscore"
},
{
"title": "Recent Issue Activity",
"description": "Recent issue activity indicates that the project is in active development",
"category": "activity",
"type": "upscore"
},
{
"title": "High Ratio of Issues Created by External Contributors",
"description": "A high ratio of issues opened by external contributors indicates that the project is active",
"category": "activity",
"type": "upscore"
},
{
"title": "Recent Pull Request Activity",
"description": "Recent pull request activity indicates that the project is active",
"category": "activity",
"type": "upscore"
},
{
"title": "Pull Requests from Bots",
"description": "Pull requests from bot accounts indicate that the project is using automation for development tasks",
"category": "code quality",
"type": "upscore"
},
{
"title": "Activity From Corporate Accounts",
"description": "Activity from corporate affiliated accounts indicates that the project may have reliable backing and support",
"category": "activity",
"type": "upscore"
},
{
"title": "Activity From Bot Accounts",
"description": "Activity from bot accounts shows that the project is using automation for some development tasks",
"category": "code quality",
"type": "upscore"
},
{
"title": "First Major Version Milestone Achieved",
"description": "The package has reached version 1.0.0, this is a sign of maturity",
"category": "code quality",
"type": "upscore"
},
{
"title": "Older Versions are Maintained",
"description": "The package keeps creating updates to earlier version trains, this is a sign of a commitment to maintaining and supporting the users of the project",
"category": "activity",
"type": "upscore"
},
{
"title": "Organization Repository",
"description": "When a repository belongs to an organization there is a lower risk of it getting abandoned in the future",
"category": "activity",
"type": "upscore"
},
{
"title": "No Known Vulnerabilities for this Version",
"description": "No vulnerabilities discovered in this version of the repository indicates that this is a version that is safe to use. Analysis only considers vulnerabilities associated with this repository and not its dependencies. Vulnerability information is based on OSV.dev data and Endor's vulnerability database",
"category": "security",
"type": "upscore"
},
{
"title": "Contributions From Many Reputable Accounts",
"description": "A large number of reputable contributors affiliated with the project indicates that the project is reliable. An account is considered reputable if it participates in multiple open source projects and has a high rating in GitHub",
"category": "popularity",
"type": "upscore"
},
{
"title": "Many Stars",
"description": "A very high number of stars indicates high interest in the project",
"category": "popularity",
"type": "upscore"
},
{
"title": "Many Forks",
"description": "Many forks show an active interest in the project",
"category": "popularity",
"type": "upscore"
},
{
"title": "Many Subscribers",
"description": "A very large number of subscribers indicates an active interest in the project",
"category": "popularity",
"type": "upscore"
},
{
"title": "Repository has Documentation",
"description": "Documentation makes a package easier to understand and use",
"category": "code quality",
"type": "upscore"
},
{
"title": "No Automated Build System",
"description": "Reproducible builds using makefiles or CI systems allow verification that no modifications, such as vulnerabilities or backdoors, have been introduced during a package's build process",
"category": "code quality",
"type": "downscore"
},
{
"title": "Repository Contains Binary Files",
"description": "When a repository contains binary files it is harder to analyze and assess its functionality and risks",
"category": "code quality",
"type": "downscore"
},
{
"title": "High Ratio of Test Code",
"description": "High quality projects should use tests",
"category": "code quality",
"type": "upscore"
},
{
"title": "Repository has Some Best Practice Files",
"description": "The repository has files that cover basic operational aspects of the project and this shows an emphasis on best practices",
"category": "code quality",
"type": "upscore"
},
{
"title": "Repository has Topics",
"description": "Configuring topics is an indication that the repository is well maintained",
"category": "activity",
"type": "upscore"
}
]
}