The repository includes tests, a changelog, static analysis, and a small runtime dependency footprint. Maintenance has stalled for over three years, while workflow references are unpinned and one action is archived.
60%
Total Score
50
100
92
50
The latest registry release was on May 31, 2023, with no releases in the last 12 months; this is a meaningful maintenance concern for a library release.
The repository recorded no commits and no active maintainers in the last three months, indicating currently inactive development despite the repository not being archived.
No repository security policy was found, which reduces transparency for reporting and handling security issues.
All 20 analyzed action references are unpinned, and a high-confidence medium-severity finding identifies an archived action in the release workflow. Workflows have no top-level permissions block, but no write-wide permissions or untrusted trigger sinks were observed.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.