It has a clear MIT license, useful README, matching source repository, and no install-time scripts. Workflow pinning and missing security policy add modest maintenance and hygiene concerns.
58%
Total Score
50
88
67
The package has only two releases, with the latest on August 13, 2020 and none in the last 12 months. This indicates prolonged inactivity and raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent development evidence.
There has been no new or closed issue or pull request activity in the last month, with one issue still open. This is a supporting sign of limited current maintenance rather than a severe risk by itself.
The repository has no security policy. For a small utility this is a transparency gap, though it does not outweigh the available license, documentation, and source correspondence.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. The absence of a top-level permissions block is acceptable on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.