The package includes a clear BSD-3-Clause license, tests, documentation, and security scanning. Its source project is archived and has no recent commits, making future fixes and maintenance unlikely.
20%
Total Score
0
60
The package has 16 releases since July 2013 but none in the last 12 months; its latest release was January 18, 2022. This supports the evidence that active maintenance has ended.
The repository recorded zero commits and zero active maintainers in the last three months. This is consistent with the archived status and leaves little evidence of ongoing maintenance capacity.
The linked repository is archived, with its last push on January 18, 2022. That is a severe abandonment risk for a dependency, despite the package's otherwise complete source tree.
The single workflow was fully analyzed with no high- or medium-confidence findings, dangerous triggers, or excessive permissions. However, all five action references are unpinned, which is a supply-chain hygiene weakness.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.