Its MIT license, clear repository match, and release notes make the package easy to audit. The long absence of releases and commits means compatibility problems are unlikely to receive fixes; CI also uses six unpinned actions.
58%
Total Score
50
92
50
The package has had only two releases, with the latest published over seven years ago and none in the last 12 months. That limits evidence of ongoing maintenance, although this may be acceptable for a narrowly scoped compatibility package.
The repository recorded no commits and no active maintainers in the last three months, consistent with a project that has been inactive for several years. No provided signal shows recent development to offset that concern.
Both workflows were fully analyzed with no dangerous findings, but all six action references are unpinned. The clean audit is positive, while unpinned dependencies leave avoidable CI supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twbs/bootstrap Version 4.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.