type

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer does not show broader organizational backing.

Release historycaution

The package has a long history and 21 releases, but it has had no release in about two years, which raises maintenance concerns for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating currently inactive development.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three workflows were analyzed without high-confidence findings or untrusted triggers, but all three action references are unpinned, leaving avoidable build reproducibility and action-tampering exposure.