Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.
68%
Total Score
75
100
75
100
Only one contributor made the single commit in the last 3 months, with 100% of recent commits concentrated in that account. Organization ownership provides some handoff capacity, but no second active contributor is shown.
All 38 action references are unpinned, and four workflows grant top-level write access. High-confidence template-injection and medium-confidence bot-condition findings add workflow hygiene concerns, although no untrusted checkout or script-injection path was detected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
minimatch Version ^10.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.