Clear licensing, repository tests, security policy, and a matching source tree support adoption. Pin workflow actions and account for the project’s single-maintainer concentration.
78%
Total Score
75
100
100
83
All 57 recent commits came from one contributor, leaving maintenance highly concentrated despite the project’s active commit rate.
The workflow audit was complete and found no injection or high-severity issues, but all 3 action references are unpinned, weakening build reproducibility and update safety.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.