openapi-server-url-templating

Release historycaution

The package has had no registry release in about 21 months, despite only four releases overall. This materially weakens confidence in continued maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent repository push does not compensate for this lack of observed development activity.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the audit found one high-confidence bot-conditions issue. The pull_request_target workflow has no untrusted checkout or script-injection sink, limiting the severity.