afaztech/reactor-referral

Release historycaution

This is a brand-new package with one release and no established release cadence, so ongoing maintenance and compatibility are not yet demonstrated.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last three months, but the package is only one day old, so this mainly shows that a longer maintenance record is unavailable.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version v0.1.0 is not a stable major release, so its API and behavior may still change substantially.

Workflow auditcaution

The single workflow has top-level write permissions and both action references are unpinned, creating mild CI and publishing hygiene concerns. The audit found no untrusted checkout, script injection, or other higher-confidence dangerous finding.