The source includes tests, release notes, and security scanning, with only one runtime dependency. Maintenance has been quiet since October 2024, and all 21 workflow action references are unpinned, so this release deserves caution.
58%
Total Score
75
100
93
The package has only two releases and none in the last 12 months, with the latest release in December 2023; this indicates limited ongoing maintenance.
The repository recorded no commits and no active maintainers in the last 3 months, although it was pushed in October 2024, suggesting maintenance has slowed rather than clearly stopped.
All 7 workflows were analyzed without dangerous triggers or audit findings, but all 21 action references are unpinned, leaving avoidable build-integrity exposure.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.