The small, inspectable codebase has a clear README, tests, no runtime dependencies, and a matching repository. Pin version 1.1.1 because future maintenance is uncertain and its workflow references are not pinned.
58%
Total Score
50
100
88
100
The latest release was published in February 2021, and there have been no releases in the past 12 months. For a small stable interface package this may be acceptable, but the long inactivity raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's more than five years without a release. This lowers confidence in ongoing maintenance.
The only workflow was analyzed successfully with no dangerous triggers or audit findings, but both of its two action references are unpinned. That is a modest supply-chain hygiene gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.