It includes a substantial README, tests, a license, and a GitHub release with detailed notes. The main limitation is limited evidence of ongoing maintenance and imperfect workflow pinning.
68%
Total Score
75
100
88
50
This is the package's first and only release, published today, so there is no track record for release cadence or long-term maintenance. The recent release itself provides some evidence of active initial development but cannot establish durability.
The repository records zero commits and zero active maintainers in the last three months. Because the project was released today, this is partly explained by its age, but it leaves ongoing maintenance unproven.
The repository has no security policy. For a small newly released library this is a transparency gap, though it is not by itself evidence that the package is unsafe to depend on.
Version v0.1.0 is not a stable major release, indicating an early API that may change. It is not marked as a prerelease, which partly offsets the concern but does not provide maturity evidence.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 analyzed action references are unpinned, which weakens build reproducibility and integrity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.