Log all requests and request errors
68%
Total Score
67
100
94
83
100
The package has 16 releases over about six years, but none in the last 12 months; the latest release was about 16 months ago. This indicates a meaningful maintenance slowdown, although the repository was recently pushed and issue/PR activity continues.
No commits or active maintainers were recorded in the last three months, a concrete sign of slowed maintenance. Recent issue and pull-request activity provides only partial compensation.
The repository has one new issue and four new pull requests in the last month, with 13 open pull requests. This shows ongoing attention, though no pull requests were merged in that period.
All six workflows were analyzed, but all 18 action references are unpinned and six high-confidence findings show GitHub App tokens inheriting blanket installation permissions. There are also two workflows with top-level write permissions; although no untrusted checkout or script-injection sink was found, this is a material workflow hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.