ankane/mitie

Lifecycle scriptscaution

The package runs post-install and post-update scripts, and its README says these scripts download a shared library; this adds install-time behavior and supply-chain exposure for consumers.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, which weakens evidence of active maintenance even though a recent release and push show the project is not abandoned.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version v0.3.0 is not a stable major version, which signals a less mature compatibility commitment, although it is not a prerelease and recent releases contain no prerelease share.

Workflow auditcaution

All two analyzed workflow action references are unpinned, so they can change without a repository commit; the audit found no dangerous triggers, untrusted checkouts, script injection, or other flagged findings.