Documentation, tests, and a matching repository make integration straightforward. MIT licensing and a security policy are in place, while the workflow uses ten unpinned actions.
65%
Total Score
75
90
75
This is a young package with only one release, published 147 days ago, so its maintenance record is not yet established. The stable v1.0.0 version provides some maturity, but cannot offset the lack of history.
The repository recorded no commits and no active maintainers in the last three months, which makes ongoing maintenance uncertain. The repository is still present and unarchived, but there is no recent activity to demonstrate support.
All 10 analyzed action references are unpinned, leaving the build exposed to moving action contents. The audit found no untrusted checkouts, script injection, or high- or medium-severity findings, so this is a hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aegisora/rule-contract Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.