A hyperlink to web pages, email addresses, or anything else a URL can address
20%
Total Score
100
100
86
83
NPM marks the entire package as deprecated with the message that it is no longer supported; this directly makes the release unfit to depend on, despite healthy repository activity.
All 11 workflows were analyzed, all 24 action references are pinned, and most workflows use read-only permissions. A high-confidence template-injection finding remains a workflow hygiene concern, but it does not outweigh the package deprecation as the main verdict.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.