The package includes tests, release notes, security scanning, and a security policy. Its workflow uses read-only permissions, but both action references are unpinned.
72%
Total Score
67
100
86
100
The package is only 60 days old with two releases, so its maintenance record is still too short to establish long-term stability.
One contributor accounts for all recent commits. Organization backing provides some handoff capacity, but no second active contributor is evidenced.
Only two commits were made in the last three months, by one active maintainer, so ongoing maintenance capacity is limited.
Version v0.8.1 is not a stable major release, which signals an API that may still change, although it is not marked as a prerelease.
The single workflow was fully analyzed, has read-only permissions, and no audit findings, but both action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aisdk/core Version ^0.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.