The small dependency surface and included tests keep adoption practical. CI’s unpinned container image weakens build reproducibility, while zero commits in three months makes ongoing maintenance less certain.
68%
Total Score
50
100
89
83
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent push timestamp.
The repository has one star and three forks, indicating limited adoption; this is supporting context rather than a health verdict, and the maintenance evidence matters more.
Version 0.5 is not a stable-major release, so the public API may still change and deserves some adoption caution.
All three workflows were analyzed with no untrusted checkout or script-injection findings, but the audit found a high-confidence unpinned container image and all six action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^3.9 | — | — |
illuminate/http Version ^v11|^12 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.