Framework-free core of the Ops monitoring suite: rollup math, latency histograms, alert rule evaluation and incident lifecycle.
72%
Total Score
caution
A well-documented first release with tests, but its 0.x status and entirely unpinned workflow actions add real adoption risk.
This is the first release and was published today, so there is no historical maintenance or release cadence to evaluate yet.
There are no commits or active maintainers recorded over the last three months, but the package is only one day old, so this is an evidence gap rather than abandonment.
The latest version is v0.1.0 and the README explicitly describes the API as subject to change before v1.0, which raises compatibility risk for dependents.
All five workflows were analyzed with no audit findings or untrusted checkout and script-injection paths. However, all nine action references are unpinned and one workflow has top-level write permissions, creating a moderate reproducibility and token-scope hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.