aeliot/yaml-token

Release historycaution

This is the package's only release, published about 113 days ago, so there is little evidence of an established maintenance or compatibility track record.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Because the project is only about 113 days old, this is a maintenance warning rather than evidence of abandonment on its own.

Version stabilitycaution

Version 0.1.0 is an early, non-stable-major release, which increases the likelihood of API changes even though it is not marked as a prerelease.

Workflow auditcaution

All 15 analyzed action references are unpinned, weakening build reproducibility and exposing automation to moving dependencies. The audit found no untrusted checkouts, script injection, or high-severity findings, which keeps this as a hygiene caution rather than a severe workflow risk.