The package has a clear license, release notes, focused interfaces, security tooling, and organization backing. Its maintenance has stopped, and all seven workflow actions are unpinned, so future fixes and build integrity deserve caution.
58%
Total Score
75
100
92
100
The package had 29 releases and a fast historical median interval of about 3 days, but no releases in the last 12 months and the latest release was in June 2024. This long pause materially raises abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the extended release pause. The repository is not archived, but that does not offset the lack of recent activity.
Both workflows were analyzed without audit failures or dangerous triggers, but all 7 action references are unpinned. This is a supply-chain hygiene gap, though it is not severe on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.