Generate placeholder images with a specific size, color and text (optional).
67%
Total Score
50
100
100
50
One registry publisher is consistent with a user-owned project, but it leaves the package dependent on a single publishing account and provides limited resilience if that person becomes unavailable.
The repository recorded no commits and no active maintainers in the last six months, which lowers confidence in continuing maintenance despite the recent release history.
No security policy was found, so vulnerability reporting and response expectations are not documented.
The only workflow was fully analyzed with no dangerous triggers or audit findings, but both of its action references are unpinned, leaving the build exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.