stream-shift

Release historycaution

The latest release was January 17, 2024, about 2 years 8 months before collection, with no releases in the last 12 months. This materially raises maintenance risk despite the package's long history.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. For a small stable utility this may reflect maturity, but it still provides weak evidence of current maintenance.

Security policycaution

The linked repository has no security policy. This reduces disclosure transparency, although the package has a small surface area and no runtime dependencies.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned. That is a reproducibility and supply-chain hygiene gap, not a severe risk by itself.