The package is small and focused, with a clear README, MIT licensing, and a minimal runtime dependency. Maintenance has been quiet recently, and all six workflow actions are unpinned, so pin this exact version and monitor project activity.
70%
Total Score
75
100
92
100
The package has four releases since November 2022, with one release in the last 12 months and the latest published in December 2025. This shows ongoing, though infrequent, maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. The repository was pushed in February 2026, which provides some recent activity but does not offset the current lull entirely.
The single workflow was fully analyzed with no detected dangerous findings, but all six action references are unpinned. That leaves the build exposed to unexpected upstream action changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.