Display a column that separates content areas vertically in your email
22%
Total Score
100
79
75
NPM marks the entire package as deprecated with the message that it is no longer supported. Active repository evidence reduces abandonment uncertainty but does not restore support for this package release.
The package has 21 releases over nearly four years, but only one release in the last 12 months. This is weaker package-level maintenance evidence than the linked repository activity.
All 11 workflows were analyzed with no untrusted checkout or script-injection trigger found, and all 24 action references are pinned. A high-confidence template-injection finding and credential-based trusted publishing are hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.