ink-spinner

Maintainerscaution

Only one account has registry publish access. The linked repository is user-owned rather than organization-owned, so there is no provided backing signal to offset the narrow publishing base.

Release historycaution

The package has 11 releases since July 2017, but none in the last 12 months and the latest release was in March 2023. That long release gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. This may fit a small stable component, but it provides limited evidence of active support.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both action references are unpinned and it has a high-confidence adhoc-packages finding. These are limited build-hygiene concerns, not severe risks.