pug-load

Release historycaution

The package has a mature history with 17 releases, but its latest registry release was on May 25, 2020 and it had no releases in the last 12 months, which raises freshness and abandonment concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a direct sign that current maintenance capacity is weak.

Repo issue activitycaution

There were two new pull requests in the last month, but no issues or pull requests were closed during that period, suggesting limited recent operational activity.

Repo toolingcaution

The project uses TypeScript and npm tooling, but no security-scanning tools were detected, leaving a modest repository hygiene gap.

Workflow auditcaution

All two workflows were analyzed with no audit findings or dangerous untrusted triggers. However, all eight action references are unpinned and one workflow grants top-level write permissions, creating reproducibility and least-privilege cautions.