rc-picker

Release historycaution

The package has 326 releases since 2019, but none in the last 12 months. Active repository work partly offsets the stale registry cadence, so this is a maintenance caution rather than abandonment evidence.

Repo package mentioncaution

The repository name does not match rc-picker and its README does not mention the package, so the linkage is less transparent than expected. The name mismatch could reflect a subproject relationship, but the missing README mention remains a caution.

Security policycaution

No repository security policy was found. This is a transparency gap, although the repository's automated security scanning provides partial compensation.

Workflow auditcaution

All 5 workflows were analyzed with no audit findings or untrusted checkouts. Five of 10 action references are unpinned and three workflows grant top-level write access, creating mild workflow hygiene concerns without an untrusted trigger or sink.