Clear documentation, tests, licensing, and security guidance make the package transparent to integrate. It is a brand-new 0.1.0 release with no measured commit history, and all nine workflow actions are unpinned, so long-term maturity and build reproducibility remain unproven.
72%
Total Score
88
100
88
88
This is the package's first and only release, published 0 days ago, so there is no release track record or established maintenance cadence yet.
No commits or active maintainers were measured during the last 3 months. Because the repository is only 0 days old, this is partly explained by its recent creation, but ongoing maintenance is still unproven.
Version v0.1.0 is not a stable major release, which indicates an early API and maturity stage despite not being marked as a prerelease.
Both workflows were fully analyzed, use read-only permissions, and contain no untrusted checkout or script-injection findings. However, all 9 action references are unpinned, leaving build behavior exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.