split2

Release historycaution

The package has 22 releases, but no registry release in about three years. That weakens evidence of ongoing release maintenance, although the repository has more recent activity.

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single individual with no demonstrated recent backup.

Repo commit activitycaution

The repository recorded only one commit in the last three months from one active maintainer. That is limited recent activity, even though the project is not abandoned outright.

Workflow auditcaution

The workflow has job-level permissions and no dangerous triggers, untrusted checkouts, or audit findings. Both analyzed action references are unpinned, creating a modest reproducibility and action-tampering concern.