The project has released 17 times in the last 12 months and had 42 commits in three months. Three active contributors and organization backing help offset concentrated commits, while workflow pinning and secret inheritance need attention.
82%
Total Score
100
100
100
75
No repository security policy was found, leaving vulnerability-reporting guidance unclear. This is a transparency gap, but it does not outweigh the demonstrated maintenance activity.
All four workflows were analyzed without untrusted triggers, script injection, or top-level write permissions, but all seven action references are unpinned and a high-confidence medium-severity secrets-inherit finding was reported.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
oat-sa/generis Version >=16.2.2 | — | — |
oat-sa/tao-core Version >=54.49.5 | — | — |
oat-sa/extension-tao-item Version >=11.0.0 | — | — |
oat-sa/extension-tao-test Version >=15.0.0 | — | — |
oat-sa/extension-tao-group Version >=7.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.