The repository has solid tests, a clear README, and 81 commits in three months. Its single-maintainer base and fully unpinned workflow references leave limited resilience and reproducibility.
62%
Total Score
75
83
50
This is a young package, only 25 days old with one release, so its maintenance record and long-term stability are not yet established.
All 81 recent commits came from one contributor, leaving maintenance highly dependent on a single person and creating a meaningful continuity risk.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Version 0.1.0 is not a stable major release, which signals an immature API and greater likelihood of breaking changes.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 15 action references are unpinned, weakening build reproducibility and update control.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.