semifies

Maintainerscaution

One registry maintainer is a thin publishing base, though the repository is owned by an organization, which provides some backing context.

Release historycaution

The package is 725 days old with only two releases and no releases in the last 12 months, indicating a long period without visible release maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with an inactive project and increasing abandonment risk.

Repo toolingcaution

The repository has neither build tooling nor security scanning configured, leaving limited automated assurance, though the package is small and has no runtime dependencies.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or dangerous triggers. Both action references are unpinned, which is a modest reproducibility and supply-chain hygiene gap.