run-async

Project backingcaution

The repository is owned by an individual user rather than an organization, so the project has a narrower visible ownership base and less demonstrated institutional backing.

Release historycaution

The package has existed since 2014 with 16 releases, but it had no releases in the last 12 months despite version 4.0.6 being the latest release, indicating a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern raised by the lack of recent registry releases.

Repo toolingcaution

The repository reports no build tool or security scanning tool. This is a transparency and maintenance gap, although the package is small and dependency-free.

Workflow auditcaution

The workflow audit completed fully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both analyzed action references are unpinned, weakening build reproducibility.