unconfig-core

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent registry release.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly established; this is a meaningful transparency concern even though subpackages can use monorepos.

Repo toolingcaution

The repository uses build and test tooling, but no security-scanning tools are reported; this is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

All three workflows were analyzed without high- or medium-severity findings, and permissions are generally scoped, but all three action references are unpinned, reducing build reproducibility and update safety.