The package includes tests, release notes, a matching license, and only one runtime dependency. Its repository is not archived, but the workflow leaves one action unpinned.
65%
Total Score
50
100
92
83
The latest release was published in June 2025, with no releases in the following 12 months and only three releases overall. This indicates slow maintenance, although the release history is consistent with a small, stable library.
The repository recorded no commits and no active maintainers in the last three months. The recent release provides some counterweight, but current maintenance activity is weak.
The single workflow was fully analyzed with no injection or high-confidence audit findings, but its one action reference is unpinned. That is a modest reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.