alleyinteractive/expiring-posts

Licensecaution

The manifest declares GPL-2.0-or-later, but the artifact license file was detected as MIT. A license exists, but the mismatch should be resolved before depending on the package.

Release historycaution

The package has only four releases since March 2022 and none in the last 12 months; the roughly 309-day median interval suggests slow maintenance rather than active development.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Workflow auditcaution

All four workflows were analyzed with no reported audit findings or untrusted checkouts. However, all six analyzed action references are unpinned and three workflows grant top-level write permissions, creating moderate workflow hygiene concerns without a demonstrated exploit path.