The package has tests, clear documentation, active release notes, and a permissive license. Recent work is concentrated in one contributor, while inherited workflow secrets and two unpinned actions add maintenance and build-hygiene concerns.
72%
Total Score
50
100
100
67
One contributor made 100% of the recent commits, leaving maintenance dependent on a single active contributor.
Only 2 commits were recorded in the last 3 months, which is modest but consistent with the recent release and pull-request activity.
No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.
All 9 workflows were analyzed and use read-only permissions, with no untrusted checkout or script-injection findings. However, two high-confidence medium-severity secrets-inherit findings and 2 of 18 unpinned actions leave workflow hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.