adamhut/weight-conversions

Release historycaution

Only two releases were published, both on December 30, 2021, with no releases in the following four years. This is a substantial maintenance concern for a dependency, despite the package remaining stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the most recent three months, consistent with a project that is currently dormant.

Workflow auditcaution

All 8 analyzed action references are unpinned, and two high-confidence findings identify a spoofable bot condition and an unpinned container image. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are workflow hygiene risks rather than severe evidence on their own.