The project has a clear README, tests, release notes, and a small runtime dependency set. Recent publishing is reassuring, but the repository had no commits in three months and all 12 workflow actions are unpinned.
72%
Total Score
75
100
100
50
There were no commits and no active maintainers in the last three months. The recent release provides some compensating evidence, but the current development pause lowers confidence in ongoing maintenance.
The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.
Both workflows use read-only permissions and the audit found no high- or medium-severity issues, but all 12 action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.