achedon12/golem

Maintainerscaution

Registry publishing is controlled by one maintainer, which creates some continuity risk; repository activity provides partial evidence of active ownership but not a broader maintainer base.

Release historycaution

The package has 9 releases in about 1 day, showing active delivery but also an unusually new and rapidly changing project with little history.

Repo commit activitycaution

No commits or active maintainers were recorded over the last 3 months, which conflicts with the recent release and pull-request activity and weakens confidence in the maintenance measurement.

Version stabilitycaution

v0.7.0 is not a prerelease, but the pre-1.0 version indicates the API and behavior may still change materially.

Workflow auditcaution

All 18 analyzed action references are unpinned, and the audit found three high-confidence template-injection findings in plugin.yml; with no untrusted checkout or injection trigger, these remain workflow-hygiene concerns rather than standalone severe risk.