Tests, a substantial README, release notes, and a small dependency set support maintainability. Three workflow actions are unpinned and no security policy is present; pin this version and verify future maintenance before upgrading.
61%
Total Score
50
100
88
50
The package has 11 releases since February 2023, but no releases in the last 12 months and the latest release was nearly two years ago. This indicates a meaningful maintenance slowdown.
The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the long gap since the latest release rather than showing ongoing maintenance.
The repository has no security policy. This is a transparency and maintenance gap, although it is not evidence that the package is unsafe.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or script injections, but all 3 of its action references are unpinned. The missing top-level permissions block is acceptable on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
orchid/platform Version ^14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.