trim-trailing-lines

Build provenancecaution

No build attestation or trusted-publisher provenance was provided, leaving publication origin less independently verifiable, though this is a transparency gap rather than evidence of an unsafe package.

Release historycaution

The package has 8 releases since July 2015, but no release in the last 12 months and its latest release was in November 2022, indicating a long maintenance gap.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with the extended release gap and increasing abandonment risk.

Security policycaution

The repository has no security policy, so it provides no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 3 action references are unpinned, weakening build reproducibility.