zip-stream

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating a recent pause in development despite a current release.

Repo toolingcaution

The repository reports no build tooling and no security scanning. This reduces maintenance and verification transparency, although the package is a small JavaScript module with a straightforward artifact.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 10 analyzed action references are unpinned, and one workflow has a low-confidence high-severity cache-poisoning finding; the audit found no untrusted checkouts or script injection, limiting the concern to workflow hygiene.