It has a compact dependency set, no install-time scripts, and security scanning. Recent work is concentrated in one contributor, and the workflow uses two unpinned actions.
76%
Total Score
67
100
94
75
One contributor made all three recent commits, leaving maintenance dependent on a single active developer.
Only three commits were recorded in the last three months. This is recent activity, but the volume is modest for an SDK.
The repository has zero stars, forks, and watchers. This provides little external validation, but popularity is supporting evidence rather than a decisive health measure.
The repository has no published security policy. That is a transparency gap for an SDK handling API credentials and shipping operations.
The only workflow was fully analyzed, uses read-only permissions, and has no detected injection or high-severity findings. However, both action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.