The small dependency surface, clear licensing, and repository tests support straightforward adoption. Maintenance is currently quiet, and the workflow's dependencies are not pinned, leaving moderate upkeep and build-reproducibility concerns.
64%
Total Score
50
100
94
75
The latest registry release was over three years ago, with no releases in the last 12 months and a median interval of 286 days. This indicates a slow or paused release cadence, though the seven-release history shows the project is established.
There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern. The repository is not archived and was pushed recently, providing some counterevidence but not recent development activity.
The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.