Clear GPL-2.0 licensing, tests, release notes, and no install-time scripts improve transparency and reduce deployment surprises. The low star count is unsurprising for a focused extension.
80%
Total Score
100
100
100
67
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
All four workflows were analyzed without untrusted checkouts or script injection, but all seven action references are unpinned and one release workflow uses high-confidence secrets inheritance; these are workflow hygiene concerns, not standalone evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
oat-sa/generis Version >=15.22 | — | — |
oat-sa/tao-core Version >=50.24.6 | — | — |
oat-sa/extension-tao-datauri Version ~2.0.0 | — | — |
oat-sa/oatbox-extension-installer Version ~1.1||dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.