A Map with weakly referenced values.
72%
Total Score
caution
Usable with caveats: a high-confidence workflow credential issue weakens an otherwise actively maintained release.
The audit found a high-confidence high-severity github-app issue where an app token inherits blanket installation permissions; 32 of 70 action references are unpinned and 7 workflows were not analyzed, adding workflow hygiene and coverage concerns.
The repository name does not match the package and its README does not mention the package, creating some uncertainty about direct package ownership; the package is plausibly a monorepo subpackage, so this is a caution rather than a severe concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.