code-red

Release historydanger

The package has 53 releases since 2019, but none in the last three years; the long release gap materially raises abandonment risk despite its historically active cadence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release gap and suggesting maintenance has stalled.

Build provenancecaution

No build attestation or staged publishing evidence is available, reducing publication transparency, though this is a secondary concern compared with the maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

The sole workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all three action references are unpinned, weakening build reproducibility.