Tests, release notes, and a clear README make the package easy to evaluate. The organization-backed repository has only three recent commits from one contributor, so longer-term maintenance is not yet proven.
67%
Total Score
67
100
86
88
The package is only 68 days old and has one release, so there is not enough release history to establish durable maintenance or compatibility patterns.
All three recent commits came from one contributor, creating a meaningful maintenance concentration risk; organization ownership provides some handoff capacity but does not demonstrate a second active maintainer.
Three commits in the last three months show some activity, but the volume is light for a package whose only release is recent.
Version v0.8.0 is not a stable major release, which adds compatibility uncertainty for adopters despite the absence of prereleases.
The workflow is fully analyzed, uses read-only permissions, and has no untrusted checkouts or script-injection findings. Both action references are unpinned, a reproducibility and update-integrity hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aisdk/core Version ^0.8.0 | — | — |
aisdk/openai-compatible Version ^0.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.