spacetrim

Maintainerscaution

Registry publishing access is held by one account. The linked repository is user-owned rather than organization-backed, so there is limited visible maintainer redundancy.

Release historycaution

The package has 104 releases over nearly five years, but only one release in the last 12 months, indicating a substantial slowdown from its historical cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of current maintenance capacity.

Version stabilitycaution

Version 0.13.0 is not a stable-major release, which leaves more API compatibility uncertainty, although it is not a prerelease and recent prerelease activity is absent.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the publish workflow has top-level write permissions. The two cache-poisoning findings are low-confidence hygiene observations, with no untrusted checkout or script-injection paths found.