The matching repository includes tests, a changelog, and a security policy, while the dependency surface is small. Workflow references are all unpinned, so updates need extra care.
58%
Total Score
100
94
100
The package has had only two releases, with none in nearly six years. The repository was pushed more recently, which reduces but does not remove the maintenance concern.
Both workflows were fully analyzed with no detected injection or high-confidence audit findings. However, all six action references are unpinned, weakening build reproducibility and update safety.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.