Tests, release notes, a security policy, and a simple dependency profile provide useful project structure. The repository is not archived and its workflow uses read-only permissions, but the maintenance record is too quiet for a stronger recommendation.
58%
Total Score
67
100
94
83
The package has existed for over 13 years, but it has only 7 releases and none in the past 12 months; the roughly 386-day median release interval points to slow maintenance.
There were no commits and no active maintainers in the past three months, a meaningful sign of limited current maintenance capacity.
Only 3 issues and 1 pull request are open, with no new or closed activity in the past month; this supports the broader picture of low recent activity but is not severe alone.
The single workflow was fully analyzed, has no reported audit findings, and scopes permissions read-only. Both action references are unpinned, which is a supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.