It includes a clear GPL license, tests, release notes, and a readme for integration. Workflow permissions are read-only, but all three referenced actions are unpinned and the repository has no security policy.
63%
Total Score
50
100
92
67
The package has only three releases since November 2021, with no release in the last 12 months and a long median interval of about 463 days. This indicates slow maintenance for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last release having been published in June 2024. This raises maintenance and abandonment concerns.
The linked repository has no published security policy. For a small library this is a transparency gap, though it is less serious than evidence of unsafe release automation or active security problems.
The workflow audit completed successfully and found no dangerous triggers, untrusted checkouts, script injection, or findings; read-only permissions are a positive. However, all three action references are unpinned, leaving avoidable build-integrity exposure.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.