The package includes a clear README, tests, a license, and minimal runtime dependencies. Organization backing and an unarchived repository help offset the limited history, while CI uses broad permissions and unpinned actions.
62%
Total Score
75
100
86
75
This is a young package with only one release, published 95 days ago, so there is little release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. The package README says development occurs in a monorepo, which provides context but does not show recent activity here.
The linked repository has no security policy, reducing disclosure transparency for a package that handles OpenID Connect logout processing.
Version 0.1.0 is an initial non-stable-major release; it may be usable, but compatibility and maintenance expectations are not yet established.
The single analyzed workflow has all 7 action references unpinned and grants top-level write permissions. No untrusted checkout, script injection, or high-severity audit finding was reported, limiting this to a hygiene concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.