It has a README, tests, no runtime dependencies, and no install scripts. The workflows have no audit findings, but all six actions are unpinned and no security policy is present.
55%
Total Score
100
83
67
The package has had no releases in about five years, despite six releases concentrated in September 2021. This is a substantial maintenance and abandonment concern.
The repository has no security policy. For a small library this is a transparency gap, though it is less serious than an archived or deprecated project.
Both workflows were analyzed successfully with no audit findings or untrusted-code sinks. However, all six referenced actions are unpinned, leaving the build exposed to action-reference changes.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.