Clear documentation, tests, and release notes make adoption easier. The single-contributor history leaves less maintenance backup than a mature project.
64%
Total Score
75
100
88
83
The package is young at 109 days, with 5 releases in the last 12 months and a recent release on 2026-07-08. This shows active early development but does not yet establish long-term stability.
All 8 commits in the last 3 months came from one contributor. Organization backing provides some continuity, but no second active contributor is shown to provide maintenance redundancy.
All 9 action references are unpinned, and the audit found a high-confidence template-injection issue in sync-dashboard.yml. No untrusted checkout or script-injection trigger was found, so this is a meaningful workflow-hygiene concern rather than a severe standalone risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.