The project includes tests, a changelog, and a clear MIT license. One contributor handled all 15 recent commits, while both workflow actions are unpinned. Recent releases and active maintenance otherwise support continued use.
79%
Total Score
67
100
94
67
The repository is owned by a user account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
All 15 recent commits came from one contributor, leaving maintenance highly dependent on a single person.
The repository has zero stars and forks and one watcher; this is weak supporting evidence, but popularity alone does not outweigh its active release and commit history.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, reducing build reproducibility and update safety.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.