cache-content-type

Release historycaution

The package has existed for about 8 years and has four releases, but none in the last 12 months; the latest release was about 18 months ago. This suggests a slow, possibly adequate cadence for a small stable utility, but lowers confidence in active maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The repository's recent push provides some compensation, but the current absence of activity is a real maintenance concern.

Repo popularitycaution

The repository has one star, no forks, and no watchers. Popularity is only supporting evidence, but this very small footprint offers little external maintenance signal.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is partly offset by the package's clear license, provenance attestation, and small dependency surface.

Workflow auditcaution

Both workflows were analyzed successfully with no detected injection sinks or high-severity findings. However, both uses are unpinned, which leaves action versions mutable and is a minor supply-chain hygiene weakness.