potpack

Release historycaution

The project is mature, with releases since 2018, but only five releases overall and none in the last 12 months indicate a slow release cadence.

Repo commit activitycaution

There was one commit in the last three months, showing some recent activity but not a strong maintenance cadence.

Repo toolingcaution

TypeScript build tooling is present, but no security scanning tools were detected; this is a minor transparency and hygiene gap for a small package.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injections, or audit findings. However, both of its two action references are unpinned, which weakens build reproducibility.