It includes tests, release notes, a clear MIT license, and a security policy. Workflow automation has a high-confidence bot-condition finding and all seven actions are unpinned. The project is newly published, so its long-term maintenance record is not established.
68%
Total Score
75
100
93
83
Only two releases exist and the package is 0 days old, so there is not yet enough release history to demonstrate sustained maintenance.
There were no commits and no active maintainers in the last three months; because the project is newly published, this is a limited but real warning about unproven maintenance depth.
The audit completed all three workflows but found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; all seven action references are also unpinned, creating avoidable workflow supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.