The package is clearly licensed and its repository shows recent work from five contributors under organizational ownership. The missing security policy and limited release history add modest transparency and continuity concerns.
78%
Total Score
100
92
75
Only two releases exist, with the latest registry release in August 2021 and none in the last 12 months. Recent repository activity partly offsets the sparse publishing history, but registry freshness remains a concern.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is not by itself evidence of unsafe code.
The single workflow was fully analyzed with no dangerous triggers or audit findings; two of four action references are unpinned, a minor reproducibility concern rather than a severe workflow risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.