postcss-reporter

Release historycaution

The package has 28 releases over more than 11 years, but none in the last 12 months and no release since January 2024. This materially raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. Although the repository was pushed recently, the observed commit activity still indicates limited active development.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, though it is less serious than the observed maintenance slowdown.

Workflow auditcaution

The workflow audit was complete and found no dangerous sinks or high-severity issues, with read-only job permissions. However, all 9 action references are unpinned, leaving avoidable build-integrity and update risk.