The repository includes tests, a changelog, a security policy, Dependabot, and recent activity from two contributors. One high-confidence workflow template-injection finding leaves a modest automation-hygiene concern.
84%
Total Score
100
100
94
100
The package is young at 88 days and has only two releases, so long-term release stability is not yet demonstrated. However, both releases occurred recently and the repository shows ongoing activity.
All four workflows were analyzed, all 11 action references are pinned, and no untrusted checkout or script-injection paths were found. The audit did identify one high-confidence template-injection issue and one workflow with top-level write permissions; without a dangerous trigger, these remain hygiene concerns rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.