The package includes extensive tests, a substantial README, a license file, and a security policy. Its CI is complete but uses 16 unpinned action references, increasing build reproducibility risk.
68%
Total Score
75
100
94
100
The package has existed for about 7 years with seven releases, but only one release in the last 12 months and a median interval of about 433 days indicate a slow maintenance cadence.
There were no commits and no active maintainers in the last 3 months. This is a meaningful sign of limited recent maintenance, though the package has a recent release and an unarchived repository.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 16 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.