Tests, release notes, and a clear README make the package straightforward to adopt. The long release gap, absent security policy, and unpinned workflow actions reduce confidence; pin this version only if its current behavior is acceptable.
65%
Total Score
50
92
50
The package has had no release in the last 12 months, with its latest release 19 months ago. This suggests slowed maintenance, though the package has a multi-year history and five releases.
The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance, but does not by itself establish abandonment.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a package used in application email rendering.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned. That leaves avoidable build-supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.