The clear README, tests, changelog, and release notes support straightforward integration. However, no registry release has appeared for over three years, recent repository commits are absent, and workflow references are not pinned.
58%
Total Score
50
93
83
The package has existed since 2015 and has seven releases, but its latest registry release was over three years ago with none in the last 12 months. This is a meaningful maintenance concern for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months. The repository was pushed in October 2024, so it is not clearly abandoned, but recent development activity is currently dormant.
No repository security policy was found. For a maintained library this weakens vulnerability-reporting transparency, although the repository does use security scanning.
Both workflows were analyzed successfully with no untrusted checkout or script-injection findings, but all 19 action references are unpinned and one workflow uses an archived action. These are workflow hygiene and reproducibility concerns, not a severe risk by themselves.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.