Automated tests, a long README, and release notes make the package easy to evaluate. Its history spans only about seven hours, and all nine workflow actions are unpinned, so long-term maintenance and build reproducibility remain less proven.
76%
Total Score
50
88
50
Only two releases exist, published within roughly seven hours, so there is not yet enough history to demonstrate sustained maintenance. The rapid second release is a small positive for early responsiveness.
The repository shows zero commits and zero active maintainers during the last three months, but the repository was pushed recently and recorded three merged pull requests in the last month. The project is too new for this to establish a durable maintenance pattern.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a modest transparency gap rather than a severe adoption risk.
All five workflows were analyzed successfully with no untrusted checkouts, script injection, dangerous triggers, or audit findings. However, all nine action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.