62%
Total Score
caution
Usable with caveats: this is a brand-new package with only two releases and no security policy.
Only one registry account has publish access, creating limited publishing redundancy, although the repository is clearly tied to the same individual project.
The package is brand new, with two releases published within a day, so there is little evidence of sustained maintenance or production maturity.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Version 0.1.0 is not a prerelease and has release notes, but the recent history is too short to demonstrate stability over time.
The single workflow was fully analyzed with no reported findings or untrusted triggers, but all three referenced actions are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.