The package is small and focused, with one runtime dependency and no install-time scripts. It has a matching repository, tests, release notes, and a clear license.
71%
Total Score
88
100
94
83
All 15 recent commits came from one contributor, giving the project a concentrated maintenance base. Organization backing provides some handoff capacity, but no second active contributor is shown.
The repository has 1 star, 0 forks, and 1 watcher. Low popularity is only supporting evidence and does not outweigh the observed maintenance and organizational backing.
The repository has no published security policy. For a small library this is a transparency gap, though recent maintenance and automated dependency scanning partly reduce the concern.
The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, leaving a workflow reproducibility and action-supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.