Rank#1514
Security Findings
3No tagged releases
SuspiciousLineageRepo ships no git tags and no GitHub releases — consumers cannot pin to stable, reviewable versions
pull_request_target with secrets
MaliciousLineage[.github/workflows/nailaopus.yml] pull_request_target with secrets
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/triage.yml] curl -sS --fail-with-body https://api.anthropic.com/v1/messages
Editions
1- 0.2.5Scanned Aug 4, 2026, 03:33 PMMedium