The repository is not archived and includes tests, a changelog, licensing, and security tooling. However, this release has had no newer registry release since March 2020, while recent commit activity is also absent, so maintenance appears limited.
58%
Total Score
75
94
50
The package has 15 releases since 2015, but none in the last 12 months and the latest release was in March 2020. This long release gap materially raises abandonment and compatibility risk.
There were zero commits and zero active maintainers in the repository during the last three months. This reinforces the concern raised by the long registry release gap.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but not severe enough to make the release unfit on its own.
The workflow audit completed cleanly, uses read-only permissions, and found no dangerous workflow patterns. Both analyzed action references are unpinned, which is a modest supply-chain hygiene weakness.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.