rc-tooltip

Lifecycle scriptscaution

A prepare install-time script is present. This is a mild supply-chain consideration, but the available project and package evidence does not show that it is unsafe.

Release historycaution

The project has 99 releases over more than 11 years, but it has had no registry release in the last 12 months and the latest release was in January 2025.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less explicit, though active security scanning partly compensates for that gap.

Workflow auditcaution

All five workflows were analyzed with no audit findings, untrusted checkouts, or script injection. However, 5 of 10 action references are unpinned and three workflows use top-level write permissions, creating moderate workflow-hygiene concerns.