The repository includes tests, release notes, and a clear README, but there is only one registry maintainer and no security policy. Workflow images are unpinned, increasing build reproducibility risk.
61%
Total Score
50
100
88
67
A single registry maintainer is consistent with this user-owned project but leaves little publishing redundancy if that maintainer becomes unavailable.
The registry namespace and repository are owned by the same individual, making the ownership relationship clear but providing no organizational backing.
The latest release was over two years ago, with no releases in the last 12 months and only three releases overall. This points to reduced maintenance capacity.
There have been no commits and no active maintainers in the last three months, reinforcing the maintenance concern indicated by the release history.
There are no open issues or pull requests, and no recent activity. This is consistent with a quiet project but provides no evidence of active support.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.