packaged/validate
The MIT license, tests, release notes, and matching repository provide useful transparency and maintenance structure. However, no commits were recorded in the last 3 months, all 6 workflow actions are unpinned, and the release workflow uses long-lived registry publishing credentials.
62%
Total Score
75
90
50
Health Score Breakdown
This is a mature package with 42 releases since August 2016, but it has had no registry releases in the last 12 months after its latest release in August 2025.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating currently quiet maintenance.
The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
All 6 analyzed action references are unpinned, and the audit found high-confidence use of trusted publishing with long-lived registry credentials; the workflow has no untrusted trigger or checkout sink, limiting the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Richard Gooding |
| Tom Kay |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.