Security scanning, a clear license, and comprehensive tests and documentation improve confidence. Most workflow action references are unpinned, but active Apache-backed maintenance and recent releases offset that hygiene concern.
84%
Total Score
100
100
100
100
All 21 workflows were analyzed with no reported audit findings, and there are no untrusted checkouts or script-injection findings. However, 116 of 138 action references are unpinned, leaving a meaningful reproducibility and action-supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.