hex-rgb

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer provides limited visible continuity if that maintainer stops supporting the package.

Release historycaution

The package has had no release in over 5 years, with the latest release in May 2021. Its eight-release history shows maturity, but the prolonged pause raises maintenance risk.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, consistent with the repository's last push being over 4 years ago and indicating low current maintenance activity.

Workflow auditcaution

The workflow audit found no dangerous triggers, sinks, or severity-rated findings, but both action references are unpinned, leaving a modest build-integrity hygiene gap.