resolve-cwd

Project backingcaution

The linked repository is owned by an individual rather than an organization, so there is no organizational backing signal to offset the thin maintenance evidence.

Release historycaution

The package is mature but has only three releases, with no releases in the last 12 months and the latest release dating to April 2019; this indicates a long period without published maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the measured three-month period, consistent with an inactive project and increasing abandonment risk.

Repo toolingcaution

No build tools or security-scanning tools were detected. For this small package that is a hygiene limitation rather than a severe risk, but it reduces evidence of modern project controls.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or audit failures. Both action references are unpinned, which weakens build reproducibility but is not severe on its own.