Check if a project is using Yarn
78%
Total Score
50
100
93
83
The package is mature at nearly 10 years old, but it has only five releases and none in the last 12 months; the latest release was about one year ago. This suggests a slow maintenance cadence, though not abandonment by itself.
The repository recorded zero commits and zero active maintainers in the last three months. The recent v4 release provides some compensating evidence, but the current activity level still raises maintenance concern.
The single analyzed workflow is complete and has no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its two action references are unpinned, leaving avoidable workflow supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
find-up-simple Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.