tinypool

Repo commit activitycaution

There were four commits from two active maintainers in the last three months, showing continued work, though the volume is modest.

Security policycaution

No repository security policy is present, leaving vulnerability-reporting guidance undocumented; this is a transparency gap but not evidence of abandonment.

Token permissionscaution

Three workflows lack top-level token permissions and the publish workflow declares write access, so workflow privileges are less explicitly constrained than ideal.