The MIT license, matching repository, tests, and readme make the package transparent to inspect. Its workflow uses three unpinned actions, and the project has no security policy; maintenance evidence is necessarily limited.
62%
Total Score
50
80
50
This release was published today and is the package's only release, so there is no demonstrated release track record yet.
The repository has recorded zero commits in the last three months and no active maintainers in that period. Because the repository was also created today, this is limited maintenance evidence rather than proof of abandonment.
The repository has no security policy. This is a transparency and reporting gap, although the package's small, data-focused scope limits its effect.
Version v0.1.2 is below a stable major release, which signals an early-stage API and data set despite not being marked prerelease.
The single workflow is fully analyzed and uses read-only permissions with no dangerous findings, but all three action references are unpinned, leaving them exposed to upstream changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.