slow-redact

Release historycaution

The package has six releases, but the latest release is about 11 months old despite the project being less than a year old, so ongoing release momentum is uncertain.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, a meaningful sign of currently weak maintenance activity.

Repo issue activitycaution

One issue and one pull request appeared in the last month, but none were closed or merged, suggesting limited demonstrated issue resolution.

Version stabilitycaution

Version 0.3.2 is not a prerelease, but the package remains below 1.0, so its public API may still change materially.

Workflow auditcaution

Both workflows were analyzed completely and scope permissions at job level, with no untrusted checkout or script-injection trigger. However, the release workflow has five high-confidence template-injection findings, installs a package outside a lockfile, and three of four action references are unpinned; these are publishing hygiene risks even without a dangerous trigger.