The source repository is not archived and includes tests, release notes, and a clear MIT license. All 10 workflow actions are unpinned and there has been no commit activity in three months, so maintenance and build reproducibility need attention.
62%
Total Score
50
100
92
100
The package has had no registry release in over five years, with zero releases in the last 12 months. This is a meaningful maintenance concern, although the linked repository remains available and was pushed recently.
The repository recorded zero commits and zero active maintainers in the last three months. That suggests limited current maintenance activity despite the repository not being archived.
All 10 analyzed action references are unpinned, reducing build reproducibility and increasing exposure to changed upstream actions. The audit found no untrusted checkouts, script injection, or high-severity findings, which keeps this as a hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.