Get details about the current Continuous Integration environment
74%
Total Score
50
100
100
75
100
The repository is owned by an individual rather than an organization, so there is no organizational backing signal to offset the small apparent maintainer base.
The repository recorded no commits and no active maintainers in the three months before collection, indicating a thin recent maintenance window. This is partly offset by the recent registry release, but it remains a maintenance concern.
There were no new or closed issues or pull requests in the last month, with 25 issues still open and only one open pull request, suggesting limited current project interaction.
No repository security policy was found, which reduces transparency about vulnerability reporting and response expectations.
Neither workflow declares top-level token permissions, and no workflow has read-only permissions explicitly recorded. Although no top-level write permissions were found, the incomplete restriction is a workflow-hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.