toml-eslint-parser

Workflow auditdanger

All nine workflows were analyzed, but every one of 31 action references is unpinned. A high-confidence template-injection finding and high-level write permissions add risk; the low-confidence cache finding is only hygiene.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer represents a relatively thin continuity path.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful maintenance concern despite the recent release and repository push.

Repo issue activitycaution

The repository has 10 open pull requests and one open issue, but no issues or pull requests were merged in the last month, reinforcing the recent slowdown.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security-scanning tools were detected, leaving a modest transparency and hygiene gap.