91%
Total Score
healthy
Healthy release backed by an active, well-maintained organization project with strong publishing and repository practices.
The repository name does not match the package and its README does not mention @astrojs/telemetry, which creates some uncertainty about package-to-repository mapping. The organization ownership and package placement provide partial context but do not remove that gap.
All 21 workflows were analyzed, all 75 action references are pinned, and no untrusted checkout or script-injection paths were found. High-confidence template-injection and secrets-inherit findings remain workflow hygiene concerns, but they are not independently severe under the available evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dset Version ^3.1.4 | — | — |
ci-info Version ^4.4.0 | — | — |
is-docker Version ^4.0.0 | — | — |
package-manager-detector Version ^1.6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.