alphaolomi/simplify-vfd

Release historydanger

The package has had only three releases, all clustered in June 2024, with no releases in the last 12 months. This strongly suggests maintenance has stalled.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the extended absence of new releases and indicating limited current maintenance capacity.

Workflow auditcaution

All 12 action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a significant hygiene concern rather than a standalone critical failure.