pug-linker

Release historycaution

The package has 19 releases since 2015, but its latest release was in May 2020 and there were no releases in the last 12 months. This materially raises version-staleness and abandonment concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, this weakens evidence of active maintenance for this release.

Repo toolingcaution

The project uses build tooling, but no security-scanning tools were detected. This is a modest process gap, partly offset by the repository's security policy and tested project structure.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous sinks or audit findings. However, all eight action references are unpinned and one workflow grants top-level write access, creating moderate reproducibility and permission-hygiene concerns.