The codebase is small and easy to inspect, with one runtime dependency, a clear README, and release notes for this version. Maintenance appears limited, and both workflows use unpinned actions and inherit secrets, adding avoidable supply-chain exposure.
58%
Total Score
75
100
94
75
Only two releases were published, both about 1 year 9 months ago, with no releases in the last 12 months. That limited history and long pause suggest low maintenance momentum.
There were no commits and no active maintainers in the last 3 months. Although the repository is not archived, the lack of recent commit activity weakens confidence in ongoing maintenance.
Both analyzed workflows use unpinned actions, and both high-confidence findings report inherited secrets in reusable workflows. There are no untrusted checkouts or script injections, but the workflow hygiene still adds avoidable supply-chain risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.