acamposm/ping

Lifecycle scriptscaution

A post-autoload-dump install-time script is present, which adds execution during installation and merits attention, though this signal alone does not establish unsafe behavior.

Maintainerscaution

Only one registry account has publishing access, leaving a thin release-maintainer base; the linked repository is user-owned rather than organization-backed.

Release historycaution

The package has six releases, but none in the last 12 months and its latest registry release was in December 2021, indicating a long maintenance gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of current maintenance capacity.

Workflow auditcaution

The complete workflow audit found one high-confidence medium-severity archived action and all three action references are unpinned. There are no untrusted checkouts, script injections, or broad top-level write permissions.