Clear documentation, tests, release notes, and security tooling support straightforward adoption. The small maintainer base and workflow hygiene deserve attention before relying on it for critical production systems.
68%
Total Score
67
100
100
88
The package and repository are owned by the same individual account, so there is no organizational maintenance cushion beyond the observed contributor's activity.
All seven recent commits came from one contributor, so maintenance is exposed to a single-person dependency despite the recent activity.
Both workflows were analyzed without failures and avoid untrusted checkouts or script-injection triggers, but all 8 action references are unpinned. The release workflow also has a high-confidence template-injection finding; the low-confidence cache-poisoning finding is hygiene only.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.