The package has a usable README, tests, a matching repository, and a small dependency surface. Its workflow is fully analyzed and uses read-only permissions, but both actions are unpinned.
58%
Total Score
50
88
This package has only one release, published 808 days ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance and makes adoption less reassuring.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package having received no release for 808 days. The repository is not archived, but current maintenance capacity is not demonstrated.
The single workflow was fully analyzed, has read-only permissions, and has no reported dangerous findings. However, both of its two action references are unpinned, leaving avoidable build-provenance risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.