The MIT license, clear package contents, repository tests, and security policy support transparent use. Workflow hygiene is weaker because the sole high-confidence audit finding reports an unpinned container image.
45%
Total Score
0
100
88
100
The package has had no release in over five years: its latest release was August 9, 2021, with zero releases in the last 12 months. This is strong evidence of abandonment risk despite the package having three releases overall.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since August 2021. The inactive project is not archived, but that does not compensate for the prolonged lack of changes.
All three workflows were analyzed successfully, with no untrusted checkouts or script injection, but all seven action references are unpinned and the audit found one high-confidence unpinned container image. This creates avoidable build-reproducibility and supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dragonmantank/cron-expression Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.