fill-keys

Maintainerscaution

Only one registry account has publish access, leaving limited publishing redundancy; this is a modest resilience concern for an individually maintained package.

Release historycaution

The package has only four releases and no releases in the last 12 months; its latest release was about 3 years and 11 months ago, which lowers maintenance confidence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, providing no evidence of current development activity and reinforcing the aging release history.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, leaving avoidable workflow reproducibility and update risk.