find-versions

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to offset the thin maintenance activity.

Release historycaution

The package is mature, with 17 releases over about 12 years, but it has had no registry release in the last 12 months and its latest release was over two years ago. This indicates slowed maintenance, though the stable release history is a partial compensating signal.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is concrete evidence of currently limited development activity and reinforces the stale registry release cadence.

Repo toolingcaution

The repository reports no build tool and no security scanning tools. For this small package this is a modest transparency and maintenance gap, not a severe risk by itself.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted-checkout and script-injection sinks. However, both action references are unpinned, leaving a modest reproducibility and workflow supply-chain hygiene gap.