Clear documentation, licensing, release notes, and balanced recent contribution support adoption. Workflow automation has two high-confidence findings involving broad app-token permissions, while the low-confidence cache finding is only a minor hygiene concern.
82%
Total Score
100
100
88
All five workflows were analyzed with no untrusted checkout or script-injection findings and all action references are pinned. However, two high-confidence findings report blanket app-token permissions in release workflows; the low-confidence cache-poisoning finding is only a minor hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.