The package includes tests, licensing, and a focused dependency profile. Organization backing and recent activity provide continuity, though the short README limits consumer guidance.
78%
Total Score
67
100
100
50
One contributor made all five recent commits. Organization backing partly compensates by providing handoff capacity, but no second active contributor is shown.
Five commits in the last three months show recent work, although all activity came from one maintainer, limiting independent maintenance capacity.
No security policy is present, leaving vulnerability reporting and response expectations undocumented despite the repository's security scanning tools.
All three workflows were analyzed, but all 23 action references are unpinned, one workflow grants top-level write access, and high-confidence secrets-inherit findings affect the PHP workflow.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.