The package is thoughtfully documented and has a real automated test and release setup. Its short history and single-contributor maintenance make long-term support less certain.
64%
Total Score
83
100
88
100
This is a very new package, released 46 days ago with only one registry release, so there is little evidence of sustained delivery or compatibility maintenance.
All 11 recent commits came from one contributor, leaving a thin maintenance base and making continuity dependent on a single person.
Version v0.1.0 is not a stable major release, which indicates an immature compatibility surface despite not being marked as a prerelease.
All four workflows were analyzed without untrusted checkouts or script injection, but all 12 action references are unpinned and the release workflow has a low-confidence cache-poisoning warning; these are hygiene concerns rather than evidence of a severe failure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^5.0 || ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.