deeks

Build provenancecaution

No build provenance attestation or trusted-publisher configuration is present, limiting release transparency, though this is not by itself evidence of an unsafe release.

Maintainerscaution

Only one registry maintainer is listed, creating a modest bus-factor concern for publishing continuity; the linked personal repository and recent release partly compensate.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a maintenance warning, although the recent registry release and repository push provide compensating evidence.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow audit completed successfully with no detected injection or high-severity findings, but all 4 action references are unpinned, weakening build reproducibility and update safety.