It has tests and a matching organization-owned repository, but all six workflow actions are unpinned. The missing README makes integration less clear for library users.
61%
Total Score
75
80
100
Tests are present in both the package and repository, which is a small positive; however, the package has no README, making library integration less clear.
The package has had no release in nearly two years, after five releases during its first few months; this raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the stalled release history.
All six analyzed action references are unpinned, which weakens build reproducibility, but the workflows have no dangerous triggers, untrusted checkouts, script injection, or write-wide permissions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
imedge/metrics Version >=0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.