Mock infrastructure for AI application testing — point your SDK at one local port and every provider, protocol, and service answers deterministically.
84%
Total Score
healthy
Frequent releases and organization backing outweigh concentrated recent commits and modest security-process gaps.
One contributor made 92% of the 715 recent commits, creating a meaningful concentration risk. The organization-owned project and 11 additional active contributors partly compensate, but not fully.
The project uses TypeScript, Vitest, and npm scripts, but no security scanning tools were detected. This is a modest process gap rather than evidence of unsafe code.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.
All 16 workflows were analyzed with no high- or medium-severity findings, no untrusted checkout or script-injection paths, and all 79 action references pinned. The low-confidence hygiene findings are adhoc package installation and trusted-publishing usage; the latter warrants caution, though npm provenance is present.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.