global-directory

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer is consistent with the observed project backing but provides limited redundancy.

Release historycaution

The package has only three releases over roughly 2 years and 10 months, with a median interval of about 13 months, indicating slow maintenance. A release within the assessed period provides some counterweight.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance. The recent release and matching repository push partly compensate.

Repo toolingcaution

The repository reports no build tool or security scanning tool, a modest engineering-hygiene gap for a small package.

Workflow auditcaution

The single workflow was fully audited with no high- or medium-confidence findings, no untrusted checkout or injection paths, and no broad top-level write permission. Both action references are unpinned, leaving a modest dependency-integrity concern.