hook-std

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer reflects a thin maintainer base rather than organization publishing hygiene.

Release historycaution

The package has existed since 2015 with 11 releases and a stable latest version, but it recorded no registry releases in the last 12 months. The recent v4.0.0 release and documented notes provide some evidence of continued maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This indicates limited recent activity, though the latest release was published within the broader assessment period.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, and it avoids top-level write permissions. However, both of its two action references are unpinned, leaving a modest build-integrity hygiene gap.