The project has a clear MIT license, a focused dependency set, tests, and organization backing. Maintenance is not yet demonstrated beyond an initial burst of releases, and the workflows use four unpinned actions.
61%
Total Score
75
100
86
50
Four releases were published within about two hours, but no later releases appear during the package's roughly seven-month lifetime. This looks like an initial release burst rather than demonstrated ongoing maintenance.
The repository recorded no commits and no active maintainers during the last three months, and its last push was about seven months ago. That is the strongest evidence of uncertain maintenance.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.
Version v0.1.3 is not a stable-major release, so the application skeleton may still change incompatibly as the project matures.
Both workflows were analyzed cleanly with no untrusted checkouts, injection findings, or excessive top-level permissions. However, all four action references are unpinned, leaving build inputs less reproducible than they could be.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
denosyscore/framework Version ^0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.