The package includes tests, a changelog, release notes, and a clear license. Its organization-backed repository and security policy help, while workflow references are all unpinned.
60%
Total Score
75
92
100
The package has had no release in over a year despite only three releases overall, which raises maintenance and abandonment concerns. Its short historical release interval shows an initially active project but does not offset the recent silence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and reducing confidence in ongoing maintenance.
All five analyzed action references are unpinned, creating avoidable build reproducibility and action-change risk. There are no detected untrusted checkouts, script injection findings, or audit failures, and only one workflow has top-level write permissions.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.