It has no runtime dependencies, clear documentation, tests in the repository, and an MIT license. The main concern is that releases stopped in January 2022 and no commits were recorded in the last three months.
68%
Total Score
83
100
90
83
The package has seven releases over roughly 11 years, but none in the last four years since January 2022; this indicates a meaningful maintenance slowdown for a dependency.
No commits or active maintainers were recorded in the last three months. Combined with the old latest release, this supports a caution about current maintenance capacity.
The repository uses a build tool, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, while the package's small dependency surface limits its weight.
Both workflows were analyzed with no untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned, leaving a modest workflow-reproducibility concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.