antfroger/progressive-bundle

Release historycaution

Only two releases exist, with the latest published in March 2022 and none in the last four years. This strongly suggests low maintenance activity for a library integration package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months; the last push was in February 2024, so recent maintenance capacity is weak.

Repo popularitycaution

The repository has only 1 star and 1 fork. Popularity is not required for health, but this provides little evidence of broad adoption or community support alongside the inactive release history.

Security policycaution

No repository security policy was found. This is a transparency and response-process gap, though it is less significant because the package has tests and a documented README.

Workflow auditcaution

Both workflows were analyzed successfully and expose no untrusted checkout or script-injection path, but all four action references are unpinned and a high-confidence audit found an unpinned container image.