According to the documentation on Resources in the REST API - GitHub Docs, this what a response should look like:

$ curl -I https://api.github.com/users/octocat/orgs
> HTTP/1.1 200 OK

> Server: nginx

> Date: Fri, 12 Oct 2012 23:33:14 GMT

> Content-Type: application/json; charset=utf-8

> Status: 200 OK

> ETag: "a00049ba79152d03380c34652f2cb612"

> X-GitHub-Media-Type: github.v3

> X-RateLimit-Limit: 5000

> X-RateLimit-Remaining: 4987

> X-RateLimit-Reset: 1350085394

> Content-Length: 5

> Cache-Control: max-age=0, private, must-revalidate

> X-Content-Type-Options: nosniff

However, since last week, the status field seems to be missing:

$ curl -I https://api.github.com/users/octocat/orgs
HTTP/2 200

date: Tue, 09 Feb 2021 14:04:33 GMT

content-type: application/json; charset=utf-8

content-length: 5

server: GitHub.com

cache-control: public, max-age=60, s-maxage=60

vary: Accept, Accept-Encoding, Accept, X-Requested-With, Accept-Encoding

x-github-media-type: github.v3; format=json

access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, Deprecation, Sunset

access-control-allow-origin: *

strict-transport-security: max-age=31536000; includeSubdomains; preload

x-frame-options: deny

x-content-type-options: nosniff

x-xss-protection: 1; mode=block

referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin

content-security-policy: default-src 'none'

x-ratelimit-limit: 60

x-ratelimit-remaining: 59

x-ratelimit-reset: 1612883073

x-ratelimit-used: 1

accept-ranges: bytes