The package includes clear documentation, tests, an MIT license, and release notes for this version. Its tiny dependency surface, organization backing, and automated dependency updates reduce routine maintenance risk.
68%
Total Score
83
100
88
67
Only two releases have appeared over about 2 years and 11 months, with one release in the last 12 months; this suggests a slow maintenance cadence.
No commits and no active maintainers were recorded during the last three months, which supports the concern about a slow maintenance cadence despite the current release.
The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.
Version 0.2.0 is not marked prerelease, but the pre-1.0 major version leaves more room for API changes than a stable-major release.
The single workflow was fully analyzed with no audit findings or unsafe triggers, but both action references are unpinned, reducing reproducibility and supply-chain control.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.