@panva/hkdf

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, reinforcing the lack of current maintenance capacity.

Repository archiveddanger

The linked repository is archived, a severe abandonment signal even though it was pushed in June 2025; archived projects are unfit to depend on for ongoing maintenance.

Release historycaution

The latest release was in July 2024, with no releases in the following 12 months, indicating more than one year of release inactivity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; the archived state makes this gap more significant.

Workflow auditcaution

All 20 analyzed action references are unpinned, and the audit found high-confidence adhoc package installation plus trusted publishing; low-confidence cache findings add limited weight.