The repository includes tests, release notes, a changelog, a clear file layout, and security policy. Pin v0.1.0 deliberately because the project has no release or maintenance track record yet and its workflow uses four unpinned actions.
68%
Total Score
75
100
86
88
This is the first release, published today, so there is no sustained release pattern or evidence of long-term maintenance yet.
There were no commits or active maintainers in the last three months, but the repository and first release are both new today, so this is limited evidence rather than proof of abandonment.
v0.1.0 is not a stable major release, and the README states that minor versions may change the API before 1.0. That is a compatibility concern for dependents.
The single workflow was fully analyzed with no audit findings or untrusted-trigger sinks, but all four referenced actions are unpinned, leaving avoidable supply-chain drift risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brick/math Version ^0.12 || ^0.13 || ^0.14 || ^0.15 || ^0.16 || ^0.17 || ^0.18 || ^0.19 || ^0.20 || ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.