Tlon skill binary for Linux x64
68%
Total Score
caution
Active project backing is offset by a repository/package mismatch and weak workflow pinning.
Five registry publishers are present, four using the tlon.io domain, which is consistent with the organization-backed repository. One gmail.com publishing account, dnbrwstr, is a minor account-hygiene concern rather than evidence of limited maintenance capacity.
The repository name does not match this package and its README does not mention the package, so the package-to-source relationship is less transparent. The monorepo context makes a name mismatch plausible, but the missing README mention remains a caution.
The project uses TypeScript and npm build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Version 0.8.1 is not yet a stable major release, which signals some API or behavior change risk, but it is not a prerelease and recent prereleases account for only 5%.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.