A complete README, 151 repository tests, release notes, and security scanning improve transparency. The small runtime dependency set and read-only workflow permissions are reassuring.
68%
Total Score
88
100
94
75
The package is young at 97 days, with three releases and a median interval of about 18 days, showing active early development but limited history.
All four recent commits came from one contributor. Organization ownership partly reduces handoff risk, but the observed maintenance base remains concentrated.
All three workflows were analyzed and use read-only permissions, with no untrusted checkouts, script injection, or audit findings. However, all nine analyzed action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.