The package is small and focused, with clear usage documentation and only one runtime dependency. Repository tests, Psalm scanning, and release notes add transparency, but maintenance has been quiet and the GitHub Actions references are not pinned.
64%
Total Score
100
88
75
The package has only four releases since April 2022 and none in the last 12 months; the latest release was in July 2025, indicating a meaningful slowdown in maintenance.
No repository security policy was found, leaving vulnerability reporting and disclosure expectations less transparent.
Version v0.3.1 is a normal release rather than a prerelease, but the package remains below major version 1, so its API maturity is less established.
Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all four action references are unpinned, reducing build reproducibility and increasing update risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.