@exodus/schemasafe

Release historycaution

The package has 30 releases and a fast historical median interval of about 5 days, but it has had no release in more than 3 years. That materially raises staleness risk despite the strong earlier cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This indicates currently inactive development, although the repository is not archived.

Repo issue activitycaution

There are open issues and pull requests, but none were opened, closed, or merged in the last month. This is consistent with limited recent maintenance and reinforces the release-history concern.

Security policycaution

The repository has no published security policy. This is a transparency and vulnerability-reporting gap, though it is moderated by the presence of CodeQL scanning.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts, injection findings, or excessive top-level permissions. However, all 11 action references are unpinned, leaving avoidable workflow supply-chain exposure.