The package is licensed, documented, and backed by repository tests and release notes. Maintenance has been inactive for about two years and five months, with no security policy and all three workflow actions unpinned.
61%
Total Score
50
93
50
The package has made five releases since July 2021, but none in the 12 months before collection; its latest registry release was about two years and five months ago. This is a meaningful maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the three months before collection, consistent with the long release gap. The repository is not archived, but current maintenance capacity is not demonstrated.
The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although the small helper library has limited apparent complexity.
The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, all three action references are unpinned, leaving them exposed to moving upstream revisions.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.