p-reflect

Project backingcaution

The source repository is owned by an individual rather than an organization, so the single registry maintainer does not show broader organizational backing.

Release historycaution

The package has five releases over about ten years, with no release in the last four years; this suggests slow or paused maintenance, though the small utility may be stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a maintenance concern, although the package is small and the repository is not archived.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-severity findings and no untrusted trigger or checkout. Both action references are unpinned, leaving avoidable build reproducibility risk.