The package is clearly documented and has a license, but its source repository is archived and the release notes explicitly say it will no longer be maintained. Its last release was about three years ago, so future compatibility and fixes should not be expected.
12%
Total Score
0
50
50
The registry marks the package as abandoned at package scope, making continued maintenance and future fixes unlikely.
The latest release was in May 2023, about three years before this assessment, and there were no releases in the last 12 months.
There were no commits in the last three months and no active maintainers during that period, consistent with abandonment.
The linked repository is archived, which confirms that active development has ended rather than merely slowed.
Both workflows were analyzed without reported audit findings or untrusted checkout and script-injection patterns, but all five action references are unpinned, leaving a minor reproducibility and workflow-hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.