67%
Total Score
75
89
50
The repository recorded zero commits and zero active maintainers in the last 3 months. That is a meaningful maintenance concern, although the registry still shows frequent releases.
The repository has 3 stars, 0 forks, and 3 watchers, indicating limited public adoption. Popularity is supporting evidence only, and the organization backing and regular releases partly compensate.
The repository has no published security policy. This weakens transparency for reporting and handling vulnerabilities, though it does not by itself indicate abandonment.
Version 0.28.6 is not a stable major release, but it is not marked as a prerelease and recent releases show no prerelease usage. This is a mild maturity limitation rather than a significant adoption barrier.
All three workflows were analyzed successfully, use no unpinned actions, and contain no detected injection or untrusted-checkout sinks. However, all three grant top-level write permissions, which is broader than necessary and merits caution.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
brick/math Version >=0.12.1 | — | — |
brick/date-time Version >=0.7.0 | — | — |
galbar/jsonpath Version >=3.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
speakeasy/serializer Version ^4.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.