Documentation, tests, release notes, and a clear license make the package straightforward to evaluate and integrate. Maintenance evidence is weak, and the workflow uses unpinned actions, so pinning this version should be paired with a plan to replace it if compatibility issues arise.
60%
Total Score
67
100
92
100
The package has had no registry release for about three years and eight months, which is a meaningful maintenance concern despite its long history and ten total releases.
There were zero commits and zero active maintainers in the last three months, indicating currently inactive development even though the repository is not archived.
No issues or pull requests were opened, closed, or merged in the last month, while six issues and five pull requests remain open; this suggests limited recent project response.
The only workflow was fully analyzed with no dangerous findings, but both of its action references are unpinned, leaving a minor reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.