80%
Total Score
healthy
Healthy, backed by an active organization despite no registry release for nearly two years.
The package has 39 releases over about eight years, but no release in the last 12 months and the latest registry release was in December 2024, indicating a prolonged release pause.
All six workflows were analyzed, all 22 action references are pinned, and no untrusted checkout or script injection was found. High-confidence bot-condition and broad GitHub App permission findings, plus an ad-hoc package install, are workflow hygiene concerns, while the low-confidence cache finding is limited.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.