andrecorugda/synapse

Release historycaution

The package is only 86 days old, with eight releases concentrated in its first two weeks. This shows activity but provides limited evidence of long-term stability.

Repo bus factorcaution

The repository has two contributors in the last three months, but one made 32 of 33 commits. That concentration creates a meaningful maintenance-continuity risk despite the second contributor remaining active.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear for a package that adds authentication, API, and data-handling features.

Workflow auditcaution

All two action references are unpinned, which weakens build reproducibility. The workflow has no untrusted checkout, script injection, or excessive top-level write permission findings, so this is a hygiene concern rather than a severe risk.