Regular releases and broad recent contributor activity support continued maintenance. Security scanning, a policy, and organization backing help, but workflow injection findings and 15 of 16 unpinned actions add avoidable supply-chain exposure.
68%
Total Score
100
100
100
The audit analyzed all 11 workflows and found a high-confidence template-injection issue plus three high-confidence secrets-inherit findings. In addition, 15 of 16 action references are unpinned; the pull_request_target workflow had no untrusted checkout or script-injection count, but these workflow hygiene issues still lower supply-chain confidence.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.