SUPPLY-CHAIN REPORT

actix/actix-web

Actix Web is a powerful, pragmatic, and extremely fast web framework for Rust.

VERDICTCLEAN·96/100

View on GitHub →

STARS

24,559

FORKS

1,872

OPEN ISSUES

199

LANGUAGE

Rust

LICENSE

Apache-2.0

LAST PUSH

2026-04-17

SIGNALS

Historical supply-chain incidents

No known compromise, backdoor, or wallet-drainer incident in our curated DB.

INFO

Historical security advisories

2 disclosed advisories (0 critical, 0 high) — typically patched in newer releases. Pin to the latest version.

Maintenance activity

Actively maintained. Last push 0 days ago.

Ecosystem trust

24,559 stars. Widely used — supply-chain attacks on popular repos are high-impact but also more likely to be caught fast.

License

Apache-2.0

METHODOLOGY

This report is generated on demand by querying the GitHub API for repository metadata and published security advisories, then cross-referencing our curated database of known supply-chain incidents (xz-utils, event-stream, ua-parser-js, colors.js, tj-actions, Codecov, and more). Results are cached for 24 hours. We do not scan repository code or dependencies — for that, see Snyk or Socket. Verdict: CLEAN ≥80, CAUTION 50–79, COMPROMISED<50.

SCAN A DEPLOYED SITE

Repo looks clean but the live deployment might still be exposing headers, CORS, or SSL misconfigurations.

SCAN A URL →

SCANNING actix/actix-web...