server-only

Release historydanger

Only one release exists, published about four years ago, with no releases in the last 12 months; this indicates a dormant release line.

Repo package mentiondanger

The repository name does not match this package and its README does not mention it, so the package may be piggy-backing on an unrelated or overly broad repository.

Package file treecaution

The published artifact contains only three files, which may be intentional for a tiny package, but provides little transparency about its implementation or provenance.

Version stabilitycaution

Version 0.0.1 is an early, non-stable-major release, so compatibility and maturity are limited even though it is not marked prerelease.

Workflow auditcaution

All workflows were analyzed and no untrusted checkout or script-injection sinks were found, but 196 of 203 action references are unpinned and the audit reports high-confidence template-injection findings; this is a meaningful workflow hygiene concern.