Tests, a clear MIT license, and organizational backing provide useful foundations. Maintenance has been quiet for about 18 months, the README is nearly empty, and all six workflow actions are unpinned.
58%
Total Score
75
100
80
50
The package includes tests, which supports basic project maturity, but its 14-character README provides almost no integration guidance for consumers of this library.
Only two releases exist, with none in the last 12 months; the latest release was about 18 months ago. This indicates a substantial maintenance gap for a library, although it is not evidence of abandonment by itself.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but current maintenance capacity is unclear.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious than an archived project or a workflow with confirmed unsafe credential handling.
All three workflows were analyzed without failed files or dangerous findings, but all six action references are unpinned. That leaves routine build and test inputs less reproducible than they should be.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.