promzard

Repo bus factorcaution

All one recent commit came from a single contributor. Organization backing provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating sparse recent development despite the recent release.

Repo issue activitycaution

Only four issues and one pull request are open, but there was no new or closed issue or pull-request activity in the last month, which modestly weakens evidence of active maintenance.

Type declarationscaution

No type declarations are published. This is a minor integration gap for consumers using TypeScript, but it does not indicate abandonment or poor release hygiene.

Workflow auditcaution

All eight workflows were analyzed, but all 38 action references are unpinned and four workflows grant top-level write permissions. High-confidence template-injection findings and a medium-confidence bot-condition finding add workflow hygiene risk, although no untrusted checkout or script-injection path was detected.