Clear licensing, documentation, repository tests, and security tooling provide useful transparency. Some workflow actions are unpinned, so reproducibility could be improved, but the project shows strong ongoing maintenance.
91%
Total Score
88
100
100
83
The repository is owned by the tina4stack user account rather than an organization, so there is no organization backing to offset individual ownership risk; however, recent activity shows multiple active contributors.
All six workflows were analyzed with no reported audit findings, no untrusted checkouts, and read-only permissions in four workflows. Eight of 21 action references are unpinned, which is a reproducibility and update-integrity weakness but not a severe risk here.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.