undertaker-registry

Build provenancecaution

No build attestation or trusted-publisher provenance was reported. This reduces publication transparency, but it is a secondary concern alongside the otherwise clear package and repository structure.

Release historycaution

The latest release was December 29, 2021, with no releases in the last 12 months. The package has a long history and eight releases, but the extended release gap raises maintenance risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This indicates limited recent maintenance despite the repository remaining available.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings or dangerous triggers, but all 7 action references are unpinned. That is a workflow hygiene and reproducibility concern, not a severe risk by itself.