overtrue/pinyin
A minimal runtime dependency set and documented release history reduce adoption risk. Recent repository activity is quiet, while missing security-policy documentation and unpinned workflow actions leave smaller maintenance and build-integrity gaps.
82%
Total Score
50
100
100
50
Health Score Breakdown
The repository recorded no commits and no active maintainers in the last three months. That is a caution for current maintenance responsiveness, although the recent release and push provide some compensating evidence.
No repository security policy was found. This is a modest transparency gap for vulnerability reporting, but it is not evidence that the package is unsafe.
The single workflow was fully analyzed with no injection, untrusted-checkout, or severity-rated findings. However, both action references are unpinned, which leaves a mild build-integrity and reproducibility gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 overtrue |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.