It has strong type support, tests and a changelog in the source, plus a clear MIT license. The package artifact is minimal and its repository does not identify this package directly, so verify the monorepo mapping.
87%
Total Score
100
94
75
The repository name differs from the package name, which is normal for a monorepo, but the README also does not mention this package, leaving its ownership mapping less transparent.
All 19 workflows were analyzed with no high- or medium-severity findings and all 46 action references pinned. Two high-confidence low-severity adhoc-package findings are minor workflow hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.