The package has had no registry release or repository commits for roughly four years, so future compatibility support is uncertain. It is clearly licensed, documented, tested in the repository, and backed by active security tooling, which offsets some of the maintenance concern.
62%
Total Score
67
100
92
50
The latest release was in July 2022, with no releases in the following 12 months and only three releases overall, indicating a mature but inactive release line.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest package release.
There were no new or closed issues or pull requests in the last month, while three issues and one pull request remain open; this suggests limited recent maintenance attention.
All nine workflows were analyzed with no reported audit findings or dangerous trigger sinks, but all 31 action references are unpinned, leaving avoidable build-integrity exposure.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.