gauge

Registry deprecationdanger

The entire package is marked deprecated with the message “This package is no longer supported,” making it unfit for a new dependency despite other healthy signals.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the archived repository and discontinued package status.

Repository archiveddanger

The linked repository is archived, which indicates the project is no longer accepting normal maintenance and strongly raises abandonment risk.

Release historycaution

The package has a long history and 40 releases, but it has had no releases in the last 12 months; the latest release is from May 2024, so current maintenance is not evident.

Workflow auditcaution

All eight workflows were analyzed, but all 38 action references are unpinned and high-confidence template-injection findings affect pull-request and release workflows; top-level write permissions also appear in two workflows.