Browser automation CLI for AI agents
88%
Total Score
healthy
Active project with strong release and repository backing, but all workflow actions are unpinned.
A postinstall script runs during installation, which adds operational complexity and deserves review, although it is consistent with distributing native platform binaries.
No security policy was found in the linked repository. This is a transparency gap, although active development and security scanning provide partial compensation.
Version 0.39.0 is not a stable major release, but it is not a prerelease and recent prerelease share is 0%. The versioning status is a modest maturity consideration, not a release-health problem.
Both workflows were analyzed completely with no untrusted checkouts or script injection, and one workflow uses read-only permissions. However, all 47 analyzed action references are unpinned, and a high-confidence low-severity audit found an ad hoc package installation outside a lockfile; these are workflow supply-chain hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.