Deal with numbers the right way
72%
Total Score
caution
Usable with caveats: no commits in three months and high-confidence unpinned workflow images.
There were no commits and no active maintainers in the last three months, which is a maintenance warning. Recent repository activity and two releases in the last year partly compensate, but do not remove the concern.
All four workflows were analyzed with no untrusted checkout or script-injection findings, but all 11 action references are unpinned and the audit found a high-confidence unpinned container image. This weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.