nock

Maintainerscaution

Four registry publishing accounts are present and the project is organization-backed, but pgte and mikicho use outside domains (pgte.me and tltv.co.il), creating some account-continuity risk despite the primary martynus.net domain.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a significant maintenance warning, although recent releases and pull-request activity partly offset the concern.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations and response guidance less transparent.

Workflow auditcaution

All 10 analyzed action references are unpinned, so workflow dependencies can change without a repository change; one workflow also grants top-level write permissions. The audit found no untrusted checkout, script injection, or high-confidence security findings, which limits the severity.