The package has a clear README, comprehensive tests, a focused dependency set, and an MIT license. It is not deprecated or archived, but workflow references are unpinned and no security policy is documented.
68%
Total Score
75
92
50
The package has made 25 releases since February 2024, but there have been no releases in the last 12 months; the latest release was 15 months ago, indicating slowed maintenance.
The repository recorded no commits and no active maintainers in the last 3 months, which supports concern about current maintenance capacity.
No repository security policy was found, which is a transparency gap for reporting and handling security issues, though it does not by itself indicate abandonment.
The single workflow was fully analyzed with no injection, untrusted-checkout, or severity-rated findings, but all 3 action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.