Release history shows a long-lived project with only one release in the last 12 months. Organization backing, security tooling, and release notes help, but workflow references are not pinned.
67%
Total Score
75
94
50
The package has existed for about 10 years with 20 releases, but only one release appeared in the last 12 months, indicating a quiet cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of ongoing maintenance.
No repository security policy was found, reducing vulnerability-reporting transparency, although the repository does use Sonar and GitGuardian scanning.
The single workflow was fully analyzed with no dangerous sinks or audit findings, and its job-level permissions are scoped. However, all 4 action references are unpinned, leaving build inputs less reproducible.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.