The package includes tests, a README, release notes, an MIT license, and a small runtime dependency profile. Read-only workflow permissions and Dependabot reduce operational concerns, though all three workflow actions are unpinned.
58%
Total Score
50
100
67
This package has only one release, published about 2 years and 10 months ago, with none in the last 12 months. That leaves limited evidence of an established maintenance cadence.
The repository recorded 0 commits and 0 active maintainers in the last three months. Although the repository is not archived, current maintenance activity is not demonstrated.
The single workflow uses read-only permissions and has no reported dangerous sinks or audit findings. However, all 3 of 3 action references are unpinned, creating a modest reproducibility and supply-chain hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.