methods

Release historycaution

The latest registry release was over 10 years ago, with no releases in the last 12 months. That is a substantial maintenance concern for a dependency, although the package is small and stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent push provides limited compensation, but sustained development activity is not demonstrated.

Workflow auditcaution

All three workflows were analyzed and use read-only permissions, with no untrusted checkout or script-injection findings. However, 7 of 11 action references are unpinned and a high-confidence low-severity audit found an ad hoc package install, leaving minor workflow hygiene concerns.