Usable with caveats: this is a clearly documented, organization-backed extension with minimal dependencies and no deprecation or obvious workflow hazards. It is brand new with only one release and no commits or active maintainers recorded in the last three months, so its long-term maintenance is unproven.
62%
Total Score
75
100
88
67
The package was released only 0 days ago and has just one release, so there is not enough history to demonstrate maturity or sustained maintenance.
No commits and no active maintainers were recorded in the last three months. For a package released today this may reflect limited observation time, but it leaves ongoing maintenance capacity unproven.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported, though this is a minor gap for a new, narrowly scoped extension.
One workflow declares top-level write permissions, which expands its automation authority, but the collected workflow analysis found no other dangerous workflow patterns.
Version v0.1.0 is an early non-stable-major release, which indicates a relatively immature API and release line.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.