The repository includes tests, release notes, and a clear MIT license. All workflow actions are unpinned, and the project lacks a security policy, adding modest transparency and build-hygiene concerns.
56%
Total Score
50
92
50
Only two releases were published, both nearly five years ago, with no releases in the last 12 months. This is the strongest maintenance concern despite the stable 1.0.0 version.
The repository recorded no commits or active maintainers in the last three months, and its last push was nearly four years ago. The repository is not archived, but current maintenance capacity is not evident.
No security policy was found in the repository. This is a modest transparency gap for a maintained library, though it does not by itself indicate abandonment.
Both workflows were fully analyzed with no dangerous triggers, sinks, or audit findings, but all 6 action references are unpinned. That leaves avoidable build reproducibility and action-substitution exposure.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.