errlop

Release historycaution

The package has 112 releases over about 8 years, but there were no releases in the last 12 months. The long history is reassuring, while the recent pause lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Recent repository push metadata and merged pull requests provide some counterweight, but the measured coding inactivity remains a maintenance concern.

Workflow auditcaution

The single workflow was fully analyzed and scopes permissions at job level, with no untrusted checkout or script-injection findings. However, all 9 action references are unpinned, and a high-confidence bot-conditions finding indicates a workflow condition may be spoofable, so CI hygiene needs improvement.