aleex1848/blade-hwkicons

Release historycaution

The package has five releases over roughly three years, with only one release in the last 12 months and a median interval of about 132 days. This indicates a small, somewhat slow-moving project rather than abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That recent inactivity lowers confidence in ongoing maintenance, though the latest package release was published within the observed period.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package. That creates some uncertainty about package-to-source alignment, though the matching repository name is compensating evidence.

Security policycaution

No security policy was found in the repository. This is a transparency and response-process gap, although the package is small and other repository tooling is present.

Workflow auditcaution

All three referenced GitHub Actions are unpinned, which weakens build reproducibility and supply-chain hygiene. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-confidence workflow findings, which limits the impact to caution.