rgb2hex

Release historycaution

The package has 17 releases, but none in the last 12 months and the latest release was nearly six years ago, indicating meaningful maintenance risk.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a maintenance concern even though the repository was pushed recently.

Security policycaution

The repository has no security policy, reducing transparency for vulnerability reporting, although its README references security scanning.

Workflow auditcaution

The single workflow was fully audited with no reported findings or untrusted execution paths, but both action references are unpinned, leaving a modest reproducibility risk.