ahmedtofaha/meow-points

Release historydanger

The latest release was published about four years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package having three releases overall.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates a serious lack of ongoing maintenance.

Workflow auditdanger

All 12 action references are unpinned, and a high-confidence bot-conditions finding reports that actor context may be spoofable in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is serious workflow hygiene risk rather than a standalone critical verdict.

Project backingcaution

The source repository is owned by an individual user rather than an organization, so the single registry maintainer provides limited visible backing for long-term continuity.

Repo issue activitycaution

There are four open pull requests but no issues or pull requests were opened or merged in the last month. The stale open work adds to the maintenance concern.