86%
Total Score
healthy
Active, well-backed project with frequent releases; beta status and mostly unpinned CI actions are the main cautions.
Five registry publishers are listed, and the organization-backed project makes a short publishing roster unsurprising. The consumer-domain accounts at gmail.com and hotmail.com are account-hygiene cautions, not evidence of limited maintenance capacity.
Version 4.0.0-beta.4 is a prerelease, and 80% of recent releases are prereleases, so API stability is not yet assured even though the major line is established.
All six workflows were analyzed with no high- or medium-severity findings, no untrusted checkouts, and no script injection. However, 42 of 43 action references are unpinned and high-confidence adhoc-package findings appear across several workflows, creating a reproducibility and workflow-hygiene caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nostics Version ^1.3.0 | — | — |
tinyexec Version ^1.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.