The package includes tests, release notes, and substantial documentation, while two contributors made 88 commits in the last three months. The workflow audit found no dangerous triggers or findings, but all 11 action references are unpinned and no security policy is present.
84%
Total Score
100
100
89
50
Six stars and no forks show limited adoption, but popularity is supporting evidence and does not outweigh the active release and commit history.
Composer build tooling is present, but no security scanning tools were detected, leaving automated security coverage unclear.
The repository has no security policy, leaving reporting and response expectations undocumented; this is a transparency gap rather than evidence of abandonment.
All four workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, creating a modest reproducibility and workflow supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
basis-company/nats Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.