stdin-discarder

Build provenancecaution

No build attestation or staged publishing evidence is available, leaving publication provenance less transparent than it could be.

Maintainerscaution

Only one registry publishing account is listed, creating limited operational redundancy, although the release history and linked repository show an established project owner.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which weakens evidence of active development; the recent release and repository push provide some compensation.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write permissions; however, both of its two action references are unpinned, leaving a minor reproducibility and action-substitution risk.