It has a clear README, tests in the repository, a small dependency surface, and no install-time scripts. The workflows need tightening because all nine actions are unpinned and one high-confidence bot-condition issue was found.
78%
Total Score
100
100
100
83
The audit analyzed all four workflows without failures and found no untrusted checkouts or script injection, but all nine action references are unpinned and it found one high-confidence bot-condition issue in the Dependabot auto-merge workflow. These workflow hygiene and automation risks warrant caution.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.