Generated TypeScript definitions based on community contributed JSON Schemas
22%
Total Score
67
83
83
The package is deprecated at package scope with an explicit message that it is no longer supported. This is a severe barrier to adopting this release despite activity in the linked repository.
The latest registry release was nearly two years before collection, with no releases in the preceding 12 months. The historical cadence was frequent, so this represents a substantial slowdown, partly offset by recent repository activity.
All recent commits came from one contributor. Organizational ownership provides some handoff capacity, but no second recently active contributor is shown to reduce this concentration.
Only one commit was recorded in the last three months, indicating limited recent implementation activity even though the repository is not abandoned outright.
All nine workflows were analyzed with no reported audit findings or untrusted checkouts. However, 22 of 31 action references are unpinned and two workflows grant top-level write permissions, so workflow hygiene is weaker without evidence of an accompanying untrusted sink.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.