safe-push-apply

Maintainerscaution

One registry maintainer is a thin publishing base, although the linked repository is maintained under the same individual account and the package has a matching source repository.

Release historycaution

This is the package's only release, published 628 days ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance and release responsiveness.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, despite a recent push recorded in January 2026. This weakens evidence of current maintenance.

Workflow auditcaution

All six analyzed action references are unpinned, which leaves workflow dependencies exposed to changing upstream code. However, there were no audit findings, no untrusted checkouts, no script injection, and no top-level write permissions.