MIT licensing, bundled type declarations, a README, and no install-time scripts make this straightforward to consume. The only reservations are a low-confidence workflow hygiene issue and the package not being named in the monorepo README.
93%
Total Score
100
100
94
83
100
The repository name does not match the package and its README does not mention it, which creates a small provenance-transparency concern; the organization-backed pnpm monorepo context partly offsets that concern.
All 26 workflows were analyzed with no high- or medium-severity findings, no untrusted checkouts, no script injection, and all 234 action references pinned. A high-confidence low-severity adhoc-package finding in the release workflow is a minor hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.