The source includes tests, a clear license, and a minimal runtime dependency. However, this is a one-release package with no commits in the last three months and all four workflow actions unpinned.
67%
Total Score
75
100
93
There has been only one release, about 10 months ago, so the project has limited demonstrated release history. This is a maintenance concern, though the repository was pushed more recently.
The repository recorded 0 commits and 0 active maintainers in the last three months. That indicates limited recent development activity despite the repository not being archived.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 of 4 action references are unpinned. That leaves avoidable build-integrity exposure and is a hygiene concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.