The MIT license, documented usage, repository tests, and security policy support adoption. The small organization-backed project also uses dependency scanning, but its workflow references are not pinned.
68%
Total Score
75
100
94
88
The package has only four releases since October 2022 and no releases in the last 12 months; the latest release was published in June 2025, indicating a prolonged release gap.
There were no commits and no active maintainers in the last three months, a meaningful maintenance concern, although the repository was pushed in March 2026.
Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all five action references are unpinned, leaving the workflow exposed to mutable action changes.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.