The small dependency set, MIT license, tests, and organization ownership reduce adoption friction. Long release inactivity and absent recent commits suggest maintenance may be limited; workflow references are also unpinned.
62%
Total Score
75
100
92
67
The package has had only two releases, with the latest on December 29, 2023, and none in the last 12 months. This is a meaningful maintenance concern for a dependency assessed in 2026.
The repository recorded zero commits and zero active maintainers in the last three months. The repository was pushed in November 2024, so this indicates limited recent development rather than clear abandonment.
The repository has no security policy. This reduces vulnerability-reporting transparency, although the package's small scope and other available project evidence partly limit the concern.
The single workflow was fully analyzed with no dangerous findings, but all 3 of 3 action references are unpinned. That leaves the build exposed to moving action revisions despite otherwise clean workflow hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.