Simple yet powerful framework for building command-line apps.
88%
Total Score
healthy
Recent releases, active organization-backed maintenance, and verified publishing support this release; all workflow actions remain unpinned.
The repository uses TypeScript, Vitest, Vite, and npm scripts, indicating an established build and test setup. No security scanning tools were detected, which is a modest transparency gap.
No repository security policy was detected. This is a minor transparency gap for vulnerability reporting, not evidence that the package is unsafe.
All three workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection. However, all 5 referenced actions are unpinned, leaving a workflow dependency-integrity gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.