ember-cli-version-checker

Release historycaution

The package has 35 releases since 2015 but no registry release in about five years, indicating a mature yet inactive release line.

Repo bus factorcaution

All nine recent commits came from one contributor, creating a real continuity risk; organization ownership provides some ability to hand maintenance off.

Repo toolingcaution

No build or security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap for the project.

Security policycaution

The repository has no security policy, which weakens the documented process for reporting and handling vulnerabilities.

Workflow auditcaution

All 12 analyzed action references are unpinned, so workflow dependencies can change unexpectedly; the pull_request_target workflow has no untrusted checkout or script-injection sink, and two workflows scope permissions at job level.