The project has a clear MIT license, tests, documentation, and a GitHub release for this version. Recent commit activity is quiet, and all four workflow actions are unpinned, leaving modest maintenance and build-reproducibility concerns.
76%
Total Score
75
100
100
88
There were no commits and no active maintainers in the last three months, which is a maintenance warning. The recent push and current release history partly offset it, so this is a caution rather than a severe abandonment signal.
The single workflow was fully analyzed with no audit findings, no untrusted checkouts, and job-level permissions. However, all four action references are unpinned, which weakens build reproducibility and leaves a modest supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
byjg/anydataset Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.