@ant-design/react-slick

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable even though other repository evidence supports the project.

Release historycaution

The package has existed for over six years with 27 releases, but only one release in the last 12 months; this suggests slower maintenance rather than abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern despite the recent release and non-archived status.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script injection, but its only action is unpinned and the audit found high-confidence secrets-inherit usage, creating moderate workflow hygiene risk.