Usable with caveats: this is a transparent, organization-backed extension shell with a clear README, minimal dependencies, and no deprecation or archived repository. It is brand new with only one release and no observed commit activity yet, while one workflow has broad write permissions and no security policy is published.
68%
Total Score
75
100
86
75
The package is 0 days old and has only one release, so there is not yet enough history to demonstrate reliable maintenance or release stability.
The repository shows zero commits and zero active maintainers during the last three months. Because the package is only 0 days old, this is limited evidence rather than proof of abandonment, but it leaves maintenance capacity unproven.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package that distributes a native binary.
One workflow has top-level write permissions, increasing the potential impact of a compromised workflow even though the other workflow is read-only and no dangerous checkout pattern was found.
Version v0.1.0 is an early, non-stable-major release, which indicates limited maturity despite not being marked as a prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.