JavaScript AsyncAPI parser.
86%
Total Score
healthy
Active releases and organization-backed maintenance outweigh workflow hygiene concerns.
The published artifact lacks a README, but the repository has tests, a changelog, and a GitHub release note for this exact version. The missing artifact README is a minor consumer-documentation gap, not evidence of poor maintenance.
All 25 workflows were analyzed with no untrusted checkouts or script injection, and 24 use read-only permissions. However, high-confidence findings include archived actions and ad hoc package installs, while 25 of 107 action references are unpinned; the low-confidence cache finding is hygiene only.
| Dependency | Last Release | Score |
|---|---|---|
ajv Version ^8.18.0 | — | — |
js-yaml Version ^4.3.2 | — | — |
ajv-errors Version ^3.0.0 | — | — |
node-fetch Version 2.6.7 | — | — |
ajv-formats Version ^2.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.