mlly

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful sign of slowed development despite a recent push and current release.

Repo issue activitycaution

There are active issues and pull requests, including eight new pull requests in the last month, although none were merged in that period; this is a modest maintenance caution rather than abandonment evidence.

Repo toolingcaution

The project uses TypeScript and a build tool, but no security scanning tools were detected; this is a limited security-process gap rather than a direct dependency risk.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response practices.

Workflow auditcaution

All workflows were analyzed with no high- or medium-severity findings and no dangerous triggers or sinks. Three of six action references are unpinned and both workflows install packages outside a lockfile, creating low-severity reproducibility and supply-chain hygiene concerns.