It includes bundled TypeScript declarations, a clear README, and release notes for this version. Workflow permissions and unpinned action references need tightening, while the missing security policy leaves a smaller transparency gap.
84%
Total Score
100
100
100
67
No repository security policy was found, leaving disclosure and response expectations less transparent.
All five workflows were analyzed with no reported audit findings or untrusted checkouts, but half use unpinned action references and three have top-level write permissions; these are workflow-hygiene concerns without an observed untrusted trigger or sink.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rc-util Version ^5.2.0 | — | — |
classnames Version ^2.2.5 | — | — |
@babel/runtime Version ^7.18.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.