It has a clear MIT license, a small runtime dependency set, and a documented package with tests and release notes. The linked organization-backed project has two active contributors, though it lacks a security policy and pins none of its four workflow actions.
86%
Total Score
100
100
94
83
The project uses Make and Composer for builds, but no security-scanning tools were detected. The missing scanner is a modest transparency gap, not evidence of abandonment.
No repository security policy was found. This weakens the project's documented vulnerability-reporting process, though it does not outweigh the active maintenance and release evidence.
Both workflows were analyzed successfully with no audit findings, unsafe triggers, or untrusted checkouts. However, all four action references are unpinned; the lack of top-level permissions is acceptable on its own but does not offset that reproducibility gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
async-aws/core Version ^1.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.