gulplog

Release historycaution

The package has existed for about 11 years, but its latest release was about two and a half years ago and there were no releases in the last 12 months. Its long history and stable release pattern partly offset the aging release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a small stable package this may reflect low change needs, but it still leaves current maintenance capacity uncertain.

Repo toolingcaution

The repository uses Gulp build tooling, but no security scanning tools were detected. This is a modest transparency and hygiene gap, partly outweighed by the repository's tests and organization backing.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned, which weakens build reproducibility and integrity.