Clear licensing, documentation, repository tests, and organization backing support adoption. The workflow uses read-only permissions and security scanning, but its two action references are unpinned and no security policy is published.
78%
Total Score
75
100
100
67
There were no commits and no active maintainers in the last 3 months, which is a maintenance concern, although the recent release history provides some compensation.
No repository security policy is published, leaving vulnerability-reporting expectations less clear for consumers.
The single workflow was fully audited, uses read-only permissions, and has no high- or medium-confidence findings, but both of its action references are unpinned, creating avoidable build reproducibility risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.