arctic

Registry deprecationdanger

The entire package is marked deprecated with no replacement, which directly signals that this release should not be adopted and outweighs the otherwise healthy project evidence.

Release historycaution

The package has 87 releases over more than 11 years, but none in the last 12 months; this suggests registry maintenance has stopped, although the linked repository shows recent activity.

Repo bus factorcaution

All four recent commits came from one contributor, leaving maintenance dependent on a single person and increasing continuity risk.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling security issues in an OAuth client library.

Workflow auditcaution

The only workflow completed the audit with no findings or untrusted execution paths, but all four action references are unpinned and the workflow grants top-level write permissions, creating avoidable maintenance and supply-chain exposure.