p-reduce

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer does not have organizational backing to offset concentration risk.

Release historycaution

The package has had no registry release for over five years, with only four releases overall and a median interval of about two years; this raises maintenance and freshness concerns.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, so recent repository activity does not yet demonstrate sustained maintenance.

Repo toolingcaution

The repository reports no build tool and no security-scanning tool; this is a modest transparency and maintenance gap for a package with an otherwise small source tree.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or audit failures. Both action references are unpinned, which is a supply-chain hygiene weakness.