The repository has had no commits in three months, and only one release landed in the past year. It is clearly packaged and licensed, with a matching repository and release notes, but its workflows use seven unpinned actions and it has no security policy.
62%
Total Score
50
100
93
50
The package has nine releases over about 18 months, but only one release in the past year; this suggests a substantially slower maintenance cadence.
The repository recorded no commits and no active maintainers in the past three months, which lowers confidence in ongoing maintenance and increases abandonment risk.
The linked repository has no security policy, leaving vulnerability-reporting expectations and response procedures unclear.
All seven analyzed action references are unpinned, weakening build reproducibility and update control. The audit found no untrusted checkouts, script injection, or high-severity findings, and job-level permissions are present in one workflow.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.