Clear documentation, tests, and a permissive license support straightforward adoption. The workflow lacks pinned actions and the project has no security policy, adding maintenance and release-hygiene concerns.
62%
Total Score
50
100
93
67
The package has 29 releases since 2012, but none in the last three years; the latest release was published on August 7, 2023. This indicates a mature but currently inactive release cadence.
There were zero commits and zero active maintainers during the last three months, which is strong evidence of inactive current maintenance.
The repository has no security policy. That does not show a vulnerability, but it leaves the process for reporting and handling security issues unclear.
The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all three action references are unpinned. The absence of a top-level permissions block is acceptable on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.