cloudevents

Release historycaution

The package has 33 releases over roughly eight years, but no releases in the last 12 months; this lowers confidence in current maintenance despite a mature release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a direct sign that maintenance has currently stalled.

Repo issue activitycaution

There were no newly closed issues in the last month and only one new pull request, indicating limited recent throughput alongside 22 open issues and 30 open pull requests.

Security policycaution

No repository security policy was found, leaving disclosure and response guidance less transparent for a widely reusable SDK.

Workflow auditcaution

All five workflows were analyzed and have no untrusted checkout or script-injection findings, but all 14 action references are unpinned and a high-severity cache-poisoning finding has low confidence; the high-confidence ad hoc package installation is a smaller hygiene concern.