rc-collapse

Lifecycle scriptscaution

A prepare script runs during package lifecycle events, adding some installation complexity, but this signal alone does not show a harmful or unusual action.

Release historycaution

The package has 85 releases over more than 11 years, but no registry release in the last 12 months. Recent repository activity partly compensates for the quiet publishing cadence.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less clear for users and contributors.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkouts, script injection, or audit findings. However, three workflows use top-level write permissions and four of six action references are unpinned, creating moderate workflow hygiene concerns.