The source project is not archived and was pushed in October 2024, with clear licensing and release notes. Its registry history is otherwise stale, and the workflow uses one unpinned action.
58%
Total Score
67
75
50
Only one release is recorded, on January 2, 2020, with no releases in the following six years. That makes this registry release stale despite the linked repository having newer activity.
There were no commits and no active maintainers in the three months before collection, indicating weak current maintenance even though the repository had a push in October 2024.
No issues or pull requests were opened or closed in the last month, alongside 24 open issues and 8 open pull requests. This suggests limited recent project activity but not abandonment by itself.
The single workflow was fully analyzed with no injection or high-severity findings, but its only action use is unpinned. The missing top-level permissions block is acceptable on its own, while the unpinned action is a minor reproducibility and supply-chain hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.