The single-person project has a clear README, release notes, tests, and security scanning. Its all-unpinned CI actions and three months without commits make this beta release a weaker long-term choice.
68%
Total Score
50
100
88
83
Only one registry maintainer is listed, limiting publishing resilience; the matching personal repository and observed release activity provide some compensation but not a broad maintainer base.
The package is young at 222 days, but 26 releases show active publishing; the extremely short median interval suggests a bursty, still-maturing release process.
There were no commits or active maintainers in the last three months, a meaningful sign of recently slowed maintenance despite the recent release history.
This is a beta release, and 80% of recent releases are prereleases, so consumers should expect more change than with a settled stable line.
All four workflows were analyzed with no detected audit findings or untrusted sinks, but all 15 action references are unpinned and one workflow grants top-level write permissions.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.