The project has a clear license, documentation, tests in the repository, and recent commits. Its organization backing helps, but maintenance is concentrated in one contributor and workflow references are not pinned.
68%
Total Score
67
100
50
One contributor made 100% of the recent commits. Organization backing provides some handoff capacity, but no second recent contributor is shown.
There were 12 commits in the last three months, but all activity came from one active maintainer, limiting the depth of ongoing maintenance.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a banking-oriented library.
Both workflows were analyzed without high-confidence findings or untrusted triggers, but all seven action references are unpinned and one workflow grants top-level write access, creating avoidable supply-chain and permission hygiene risks.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.