Recommended rule preset of secretlint.
92%
Total Score
healthy
Healthy: active releases, maintained repository, and trusted publishing outweigh one archived CI action.
A prepublish lifecycle script is present, adding some publishing-process complexity even though no install script is reported.
All eight workflows were audited with no untrusted checkouts, script injection, or unpinned action references. One high-confidence medium-severity finding identifies an archived action, and three workflows grant top-level write permissions, creating limited CI hygiene risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.