Interest under section 7Q and damages under 14B on delayed PF deposits.
68%
Total Score
caution
Usable with caveats: one young release, one active contributor, and all workflow actions are unpinned.
This is a young package, 41 days old, with only one release and no established release interval, so long-term maintenance and compatibility remain unproven.
One contributor made all eight commits in the last three months, creating a genuine single-person maintenance dependency. Organization backing provides some handoff capacity but no second active contributor is shown.
There are no new or closed issues in the last month and one open pull request, giving limited evidence of community activity for this young project.
The repository has zero stars, forks, and watchers. This provides little supporting evidence of external adoption, but popularity is not required for a small stable package.
The workflow is fully analyzed, uses read-only permissions, and has no detected injection or high-severity findings. However, all 12 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
crmleaf/payroll-core Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.