Usable with caveats: this is a clearly backed, licensed, documented first release with tests in the repository and minimal runtime dependencies. It is brand new, has no established release or commit history, and its repository security controls are incomplete.
68%
Total Score
83
100
88
63
One workflow uses pull_request_target, creating some CI risk, but no untrusted checkout or script-injection patterns were detected in the analyzed workflows.
This is the first release, published only hours ago, so there is no history demonstrating sustained maintenance or release stability.
No commits or active maintainers were observed over the last three months. Because the package is newly released, this mainly reflects insufficient history rather than proven abandonment, but it limits confidence.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package intended for integration into applications.
Three workflows request top-level write permissions and one lacks top-level permissions, which is broader or less explicit than ideal for repository automation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.