rc-rate

Lifecycle scriptscaution

A prepare install-time script is present, adding some execution during installation, though this signal alone does not show harmful behavior.

Release historycaution

The package has 33 releases over more than 10 years but no registry releases in the last 12 months. Recent repository commits partly compensate for the quiet registry cadence.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less transparent, though automated security scanning provides partial compensation.

Workflow auditcaution

All four workflows were analyzed with no auditor findings or untrusted checkout and script-injection paths. However, three workflows use top-level write permissions and four of six action references are unpinned, creating minor hygiene and reproducibility concerns without an untrusted trigger.