The repository includes tests, a changelog, Dependabot, and a clear MIT license, while its dependency set is small. Workflow hygiene is weak, with all actions unpinned and a high-confidence bot-condition finding.
56%
Total Score
50
100
93
100
This is the only release, published in April 2024, with no releases during the following 12 months; that indicates limited ongoing maintenance.
The repository recorded no commits and no active maintainers in the last 3 months, which weakens evidence of current maintenance.
All 9 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The audit was complete, but these issues reduce workflow hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.