Make your terminal beep
68%
Total Score
50
100
89
83
The repository is owned by an individual rather than an organization, so there is no organizational backing signal to offset the thin maintenance base.
The package has six releases over about 11 years, with no releases in the last five years, indicating a slow and currently inactive release cadence.
The repository had zero commits and zero active maintainers in the last three months, which reinforces the long gap since the latest registry release and raises maintenance risk.
The repository reports no build tool and no security scanning tool. For this small package that is a modest transparency gap rather than a severe dependency risk.
The workflow audit is complete and found no dangerous sinks or high-confidence findings. However, both analyzed action references are unpinned, leaving them exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yoctodelay Version ^1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.