Integration details are straightforward for consumers, with clear licensing and documentation. The organization backing provides continuity, but recent work is limited to one contributor and workflow references are unpinned.
68%
Total Score
67
100
94
75
One contributor made all recent commits, creating a concentrated maintenance risk. Organization backing offers some continuity, but no second active contributor is shown.
Only one commit was recorded in the last three months, indicating limited recent maintenance activity despite the recent release history.
The project uses Make and Composer, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so vulnerability reporting and disclosure expectations are not documented.
Both workflows were fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
async-aws/core Version ^1.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.