cli-progress-footer

Release historycaution

The package has 13 releases since October 2018, but none in the last two years; the latest release was in February 2024. This indicates a meaningful maintenance slowdown despite its established history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long release gap, this raises abandonment risk.

Repo toolingcaution

The repository uses no build tooling and has no detected security scanning. The simple package structure partly reduces the concern, but the missing security checks weaken maintenance hygiene.

Security policycaution

No repository security policy was found. This is a transparency gap, though it is less serious for a small, stable utility with no other workflow audit findings.

Workflow auditcaution

All three analyzed workflows use unpinned actions, which makes builds less reproducible and exposes them to upstream action changes. There were no untrusted checkouts, injection findings, or top-level write permissions, which limits the risk.