The source includes tests and automated security scanning, but it lacks a security policy and pins none of its two Actions references. Recent repository activity and two active contributors help offset the package’s very limited release history.
68%
Total Score
100
100
81
50
This is the package’s only release, published 102 days ago, so there is not enough release history to demonstrate sustained maintenance or compatibility stability.
The repository has no stars, forks, or watchers, which offers no external maturity evidence; this is secondary because popularity is not required for a small, actively maintained package.
No security policy is present in the repository, reducing transparency about how users should report vulnerabilities and how the project handles them.
Version 0.0.1 is not a stable major release, which signals an early API and gives consumers limited evidence of compatibility expectations.
The single workflow was fully audited with no dangerous triggers or audit findings, but both of its two action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.