A helper utility for importing global variables directly
91%
Total Score
healthy
Active releases, broad maintenance, and strong package hygiene outweigh limited CI workflow concerns.
All 26 workflows were analyzed successfully; most scope permissions at job level and only 1 of 38 action uses is unpinned. High-confidence template-injection findings and secrets-inherit findings, plus an ad hoc package install, are CI hygiene concerns, but no untrusted checkout or script-injection sink was found.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.