Runtime to be use with the Flow Enums transform.
62%
Total Score
100
100
83
83
The latest registry release was about five years ago, with no releases in the last 12 months. This raises maintenance and compatibility concerns despite the package having six releases overall.
The repository name does not match this package and its README does not mention it, so the package-to-repository relationship is not clearly established. Organization backing reduces abandonment concern but does not resolve the linkage gap.
The single analyzed workflow has all 63 action references unpinned, high-confidence template-injection findings, and a high-confidence trusted-publishing finding. Low-confidence cache findings are hygiene concerns, while the absence of untrusted checkouts and dangerous triggers limits the overall impact.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.