opossum

Release historycaution

The package has existed for about 10 years with 71 releases, but only one release appeared in the last 12 months, indicating a slower current cadence.

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization ownership provides some capacity to hand maintenance off, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, so current maintenance activity is limited even though the release itself is recent.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations unclear; its Snyk and Dependabot tooling partly compensates but does not replace a policy.

Workflow auditcaution

All four workflows were analyzed with no high-confidence findings or untrusted checkout/script-injection paths, but all 13 action references are unpinned and one workflow grants top-level write permissions.