The MIT license, focused dependency set, security policy, and documented release notes support responsible use. Maintenance has stopped for more than two years, and all three workflow actions are unpinned, so future fixes and reproducible automation are uncertain.
58%
Total Score
75
100
88
100
The package has only three releases, all concentrated between February 27 and March 2, 2024, with no releases in the last two years; this indicates an extended lack of release maintenance.
There were zero commits and zero active maintainers in the last three months, adding evidence of currently inactive maintenance.
Version 0.3.0 is a stable, non-prerelease release, but it remains below 1.0, so API stability is less assured than for a mature major release.
All three workflows were analyzed with no reported audit findings or untrusted checkout paths. However, all three action references are unpinned, which weakens build reproducibility and leaves the automation dependent on moving action versions.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.