The MIT license, clear README, matching repository, and release notes support adoption. Registry releases and repository commits have been quiet for about one year, while all seven workflow actions are unpinned.
67%
Total Score
75
90
50
The package has existed for about five and a half years with 19 releases, but it has had no registry release in the last year, indicating slowed maintenance.
The repository has had no commits or active maintainers in the last three months. A push in May 2026 shows it is not archived, but current development activity remains quiet.
The sole workflow was fully analyzed with no dangerous sinks or audit findings, but all seven referenced actions are unpinned, leaving build inputs less reproducible and harder to trust over time.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
decodelabs/coercion Version ^0.3 | — | — |
decodelabs/deliverance Version ^0.3 | — | — |
decodelabs/exceptional Version ^0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.