The repository includes tests, two active contributors, a clear README, and a small runtime dependency surface. A security policy is absent, and the project has limited release history with unpinned workflow actions, so maturity and build reproducibility remain concerns.
72%
Total Score
83
100
92
75
The repository is owned by the matching individual account rather than an organization, so the small contributor base provides limited visible institutional backing.
This release is from a package only 24 days old with one release, so long-term maintenance and release maturity are not yet established.
The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented.
Both workflows were fully analyzed with no dangerous triggers or audit findings, but all three referenced actions are unpinned, weakening build reproducibility and update control.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.