carthage-software/mago
It has a clear license, tests, and a substantial consumer README. The organization-backed repository is actively maintained, though its workflow dependencies are not pinned.
84%
Total Score
100
100
100
88
Health Score Breakdown
All 11 workflows were analyzed with no untrusted checkout or script-injection trigger, and most scope permissions at job level. However, all 73 action references are unpinned, with high-confidence template-injection hygiene and unpinned-tool findings plus a high-confidence ad hoc package install; these are meaningful workflow weaknesses but not independently severe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Seifeddine Gmati |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 revolt/event-loop Version ^1.0.9 | — | — |
Weekly Downloads
Info
- Last Published
- 8 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.