ohstudio/blade-reicon
The source repository has tests, release notes, and matching package references. The main concern is that this is a brand-new release with no observed three-month commit history, while all seven workflow actions are unpinned and one workflow grants top-level write access.
68%
Total Score
50
83
50
Health Score Breakdown
The package is only 0 days old, with two releases published about 43 minutes apart. This shows active initial work but provides no meaningful maintenance track record yet.
The repository has 0 commits and 0 active maintainers in the last three months. Because the project is newly published, this is mainly an evidence gap rather than proof of abandonment, but it limits confidence in ongoing maintenance.
The repository has no security policy. This reduces transparency for reporting vulnerabilities, although the package has Dependabot configured as a compensating security practice.
All 7 referenced actions are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkouts, script injection, or other named findings, so this is a workflow hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hubert Tulibacki |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
blade-ui-kit/blade-icons Version ^1.6 | — | — |
Weekly Downloads
Info
- Last Published
- 10 hours ago
- Created
- 11 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.