It includes tests, a matching GPL-3.0 license, and only one runtime dependency. The workflow has all three action references unpinned and uses an archived action, so updates would need care.
52%
Total Score
50
100
70
50
The package has had four releases since August 2019, but none in roughly four years; the latest release was in October 2022. This is a substantial maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent development evidence.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of community validation or backup.
The repository has no security policy, reducing transparency about vulnerability reporting and response. This matters more because the project also shows no recent maintenance activity.
The workflow audit completed fully and found no untrusted checkout or script-injection path, but all three action references are unpinned and one uses an archived action. These are maintainability and build-integrity hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.