accelade/widgets

Release historycaution

This is the only release, published about eight months ago, so there is little release history to demonstrate sustained maintenance. The repository's release notes provide some transparency but do not establish a continuing cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. That gap is meaningful for a package with only one release and weakens confidence in ongoing maintenance.

Workflow auditcaution

All four workflows were analyzed, but all 18 action references are unpinned, two workflows grant top-level write access, and a high-confidence bot-conditions finding reports spoofable actor context. These are workflow supply-chain hygiene concerns, though no untrusted checkout or script injection was found.