Frequent releases, clear documentation, tests, and a matching source repository support ongoing use. Recent repository commits are absent, while the workflows use unpinned actions and include a high-confidence template-injection warning.
68%
Total Score
75
100
100
75
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent registry releases.
No repository security policy was found. This is a transparency gap, though the package's other maintenance and tooling evidence partly offsets it.
All workflows were analyzed, but all four action references are unpinned, and one workflow has top-level write permissions. The high-confidence template-injection finding is a workflow hygiene concern; no untrusted checkout or script-injection trigger was reported, so it is not a severe standalone dependency verdict.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.