The package is small, clearly licensed, and has a focused dependency profile. Organization backing, security policy, and release notes help, but workflow references are not pinned.
68%
Total Score
67
100
94
100
The package has 11 releases since July 2020, but its latest registry release was in April 2022, with no releases in about four years. This is a meaningful maintenance concern.
No commits or active maintainers were recorded in the last three months. The recent repository push is compensating evidence, but current development activity still appears thin.
There is only one open issue and no recent issue or pull-request activity. This is a mild transparency and responsiveness concern, though the small project size limits its weight.
Both workflows were analyzed successfully with no dangerous triggers or audit findings, but all 7 action references are unpinned. That leaves avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.