The package includes tests, a clear README, a stable MIT license, and no install-time scripts. It has made no commits in the last three months and has only one release, while all nine workflow actions are unpinned.
67%
Total Score
50
88
100
This is a young package, about five months old, with only one release and no established release cadence. That limits evidence of long-term maintenance but is not severe for a focused library.
The repository recorded zero commits and zero active maintainers in the last three months. With only one release, this leaves limited evidence of ongoing maintenance.
The workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all nine action references are unpinned. That is a supply-chain hygiene gap, not a severe risk on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.