The package has a tiny runtime dependency footprint, clear documentation, and a BSD-3-Clause license. Its repository has tests, active contributors, security scanning, and read-only workflow permissions, though workflow references are not pinned.
78%
Total Score
100
100
94
100
The registry has published no releases in over four years, with only four releases overall, which raises version-freshness and maintenance concerns. Recent repository activity partly offsets the stale registry cadence.
All eight workflows were analyzed with no audit findings, no untrusted checkouts or script injection, and read-only permissions throughout. However, all eight action references are unpinned, which is a mild reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.