The package includes tests, release notes, security scanning, and a clear MIT license. Its organization-backed repository is young, and all recent commits come from one contributor; workflow dependencies are also unpinned.
66%
Total Score
67
100
88
100
The package is only 60 days old with three releases concentrated on one day, so there is limited evidence of sustained maintenance and release maturity.
One contributor made all three recent commits, creating a concentrated maintenance risk; organization ownership provides some handoff capacity but does not remove the concentration.
Three commits occurred in the last three months, showing some recent activity, but the volume is modest for a newly published package.
Version v0.8.2 is a stable release rather than a prerelease, but it remains below major version 1, so compatibility maturity is still limited.
The sole workflow was fully analyzed, uses read-only permissions, and has no reported audit findings, but both of its action references are unpinned, leaving them exposed to upstream changes.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aisdk/core Version ^0.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.