serve-placeholder

Release historycaution

The package has 14 releases over about eight years, but no release in the last two years, which indicates a slow maintenance cadence despite its established history.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, reinforcing the concern raised by the long gap since the latest registry release.

Repo toolingcaution

The project uses TypeScript and a build tool, but no security scanning tool was detected. This is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified.

Workflow auditcaution

Both workflows were fully audited with no findings or untrusted triggers, and one scopes permissions read-only. However, five of six action references are unpinned, creating a workflow reproducibility and dependency-hygiene concern.