The package has clear documentation and release notes, with a small runtime dependency surface. The long release gap, no commits in the past five months, and fully unpinned workflow actions leave meaningful maintenance and build-integrity concerns.
66%
Total Score
50
100
94
50
The project is mature, but it has only one release in the last 12 months and a median release interval of about 3.3 years, indicating a slow maintenance cadence.
There were no commits and no active maintainers in the past five months, which is a concrete sign that ongoing maintenance is currently quiet.
The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.
The sole workflow was fully analyzed with no dangerous sinks or audit findings, but all 19 action references are unpinned, leaving builds exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.