It has clear documentation, tests, and release notes, with no install-time scripts or deprecation. Maintenance is currently concentrated in one contributor, and all 16 workflow actions are unpinned.
82%
Total Score
67
100
100
All recent commits came from one contributor, leaving maintenance dependent on a single active individual; organization backing provides some handoff capacity.
Only one commit was recorded in the last three months, indicating light recent maintenance despite the current release history.
The workflow audit found no dangerous triggers, untrusted checkouts, script injection, or audit findings, and permissions are read-only; however, all 16 action references are unpinned, creating a workflow reproducibility and action-integrity hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.