queue-tick

Release historycaution

The package has had only two releases, with none in the last 12 months; its latest registry release was about four years ago. This is partly offset by the linked repository having been pushed more recently, but release maintenance is still weak.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which provides little evidence of current maintenance capacity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. For a small utility this is a transparency gap, but it does not by itself make the release unfit.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. That is a modest reproducibility and supply-chain hygiene gap, not a severe risk on its own.