58%
Total Score
67
100
67
No commits and no active maintainers were recorded over the last three months. The recent release history and recent repository push provide some compensation, but the inactivity still raises maintenance risk.
Issues and pull requests remain active, but no pull requests were merged in the last month, so visible project throughput is modest.
The repository has no published security policy, leaving vulnerability-reporting expectations less clear for a widely used project.
The audit analyzed all six workflows and found no untrusted checkouts or injection sinks, but all 49 action references are unpinned and three workflows inherit secrets, creating avoidable supply-chain and credential exposure.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.