The package has clear documentation, repository tests, release notes, and no production Composer dependencies. Its workflow uses read-only permissions but leaves both action references unpinned, so updates still require care.
62%
Total Score
50
100
67
75
The package was first released today and has four releases in the same day, so there is not yet enough history to demonstrate sustained maintenance.
The repository shows zero commits and zero active maintainers in the last three months. Because the repository was created or updated today, this is partly explained by its newness but still leaves maintenance capacity unproven.
Version v0.1.2 is an early 0.x release, and the package explicitly describes its API as subject to change before 1.0.
The single workflow was fully analyzed, uses read-only permissions, and has no reported high- or medium-severity findings. However, both action references are unpinned, leaving the workflow dependent on moving external action versions.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.