timed-out

Release historycaution

The package has existed for about 12 years but has had no registry release in the last year, which suggests slower maintenance despite the established history.

Repo bus factorcaution

All recent commit activity came from one contributor. The repository is user-owned rather than organization-owned, so there is no provided backing signal to offset this concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent development activity.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, sinks, or findings, but both analyzed action references are unpinned, leaving weaker build reproducibility.