The package includes tests, a useful README, an MIT license, and a security policy. Its only release was over three years ago, repository commits have stopped, and all five workflow actions are unpinned; pin this exact version only if its older dependencies remain compatible.
58%
Total Score
75
92
75
There has been only one release, published over three years ago, with no releases in the last 12 months. That makes compatibility and maintenance continuity uncertain.
The repository recorded zero commits and zero active maintainers in the last three months, indicating currently stalled development despite the repository not being archived.
All five analyzed action references are unpinned, which weakens build reproducibility and exposes workflow behavior to upstream changes. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, so this is a hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ray/di Version ^2.14 | — | — |
ray/aop Version ^2.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.