amethyst/permission

Release historycaution

The package has 30 releases since July 2019, but none in the last 12 months and its latest release was over two years ago. This indicates a meaningful maintenance slowdown despite its established history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this increases the risk that issues and compatibility changes will go unattended.

Workflow auditcaution

All seven analyzed action references are unpinned, including a high-confidence unpinned container image finding in the test workflow. The audit was complete and found no untrusted checkout or script-injection path, so this is a hygiene and reproducibility concern rather than a severe standalone risk.