The package has a clear README, repository tests, a matching source project, and a lean runtime dependency set. Its workflow leaves all 27 action references unpinned, and the project has seen no commits or releases for about 2 years and 10 months.
57%
Total Score
50
100
86
67
There were zero commits and zero active maintainers in the last 3 months, consistent with the long gap since the last release and increasing abandonment risk.
Only 3 releases were published, with none in the last 12 months; the latest release was about 2 years and 10 months ago. This is meaningful evidence of stalled maintenance.
No repository security policy was found. This is a transparency gap, though it is less significant for a small package with no reported security findings.
Version 0.2.2 is not a stable major release, which limits maturity expectations, although it is not marked as a prerelease.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 27 action references are unpinned, leaving builds exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.