wonka

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful maintenance warning that is partly offset by the recent release and push date.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All eight analyzed action references are unpinned, and the release workflow installs a package outside a lockfile; the audit found no dangerous trigger or untrusted checkout, so this is workflow hygiene risk rather than a severe finding.