The project includes tests, release notes, a license, and security tooling. Its workflows use unpinned actions, and the small one-person project has shown no recent development.
62%
Total Score
50
100
89
88
The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to compensate for the thin maintenance base.
The package has 14 releases since January 2021, but none in the last 12 months and its latest release was in May 2024, indicating materially slowing maintenance.
There were zero commits and zero active maintainers in the last three months, consistent with an effectively inactive project and increasing abandonment risk.
The repository has only 2 stars and no forks, providing little supporting evidence of broad adoption; popularity is secondary to the maintenance evidence.
Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, all 5 action references are unpinned, leaving a meaningful workflow supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mongodb/mongodb Version ^1.8 | — | — |
phpmyadmin/sql-parser Version ^5.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.