Clear documentation, source tests, release notes, and a minimal runtime dependency make the package straightforward to evaluate and adopt. The small maintainer base and limited recent activity leave less evidence of sustained support, while workflow pinning should be improved.
68%
Total Score
50
100
93
50
The package has six releases over about three years, with only one release in the last 12 months and a median interval of about 182 days. This is a slow but not abandoned release pattern.
The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent release history.
All four analyzed action references are unpinned, creating avoidable build reproducibility and action-update risk. The audit found no untrusted checkouts, script injection, dangerous triggers, or other reported findings, which limits this to a hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.