dash-ast

Release historydanger

The latest release was in March 2020, with no releases in the last 12 months; this indicates a long period without published updates, despite the package having a multi-year history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which weakens evidence of current maintenance capacity.

Repo issue activitycaution

There are no new or closed issues in the last month, and four pull requests remain open; this suggests limited recent project activity but is not conclusive abandonment evidence.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities; this is a transparency gap for a maintained dependency.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted checkout and script-injection paths, but all four action references are unpinned, leaving avoidable build reproducibility risk.