Documentation, tests, and a release note make integration easier. Maintenance has been inactive for about three years, and every workflow action is unpinned, so pinning this version carries ongoing risk.
58%
Total Score
50
75
The package has had no release in about three years, despite six releases overall; that long gap materially raises abandonment and compatibility risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release gap and indicating no recent maintenance capacity.
The single workflow was fully analyzed with no dangerous sinks or audit findings, but all 5 of 5 action references are unpinned, leaving build inputs exposed to future upstream changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.