The README, tests, and release notes provide a usable starting point. Only one release exists, and repository activity is absent over three months; workflow references are all unpinned.
58%
Total Score
50
83
75
This is the package's only release, published 162 days ago, so its maintenance track record is not yet established.
The repository had zero commits and zero active maintainers in the last three months. The package is young, but there is no observed recent maintenance to offset the risk.
The repository has no security policy. This is a transparency gap, although the package's small, newly released project provides limited history in which such a policy might normally appear.
Version 0.1.0 is an early, non-stable-major release, which indicates limited maturity despite not being marked as a prerelease.
All 10 action references are unpinned, and one workflow grants top-level write permissions. The only audit finding is low-confidence cache-poisoning hygiene, without an untrusted trigger or checkout to make it severe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.