launchdarkly-eventsource

Release historycaution

The package has existed since 2018 with 21 releases, but only one release in the last 12 months; the current release and recent repository activity partly offset the sparse cadence.

Repo bus factorcaution

All three recent commits came from one contributor, creating concentration risk; organization ownership provides some capacity to hand off maintenance.

Repo toolingcaution

The project uses build tooling, but no security-scanning tools were detected, leaving a modest maintenance-hygiene gap.

Workflow auditcaution

All three workflows were analyzed without failed files, untrusted checkouts, injection findings, or broad top-level write permissions. However, all 11 action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.