rc-progress

Lifecycle scriptscaution

A prepare install-time script is present, adding a small amount of installation complexity, though this signal alone does not indicate unsafe behavior.

Release historycaution

The package has 51 releases over more than 11 years, but none in the last 12 months and the latest registry release was in March 2024. Active repository commits partly compensate for the slow registry cadence.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance unclear. This is a transparency gap but not a dependency health failure by itself.

Workflow auditcaution

Three of five workflows grant top-level write permissions and half of the ten action references are unpinned, creating mild workflow hygiene concerns. The audit found no untrusted checkout, script injection, or other high-impact findings.