aqjw/shortcuts

Project backingcaution

The registry namespace and repository are owned by the same individual account. This is coherent ownership, but it does not provide organizational backing or redundancy.

Release historycaution

Only one release exists, published about 11 months ago, so there is little observed release history to establish sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. For a package with only one release, this leaves maintenance continuity uncertain.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap rather than evidence of unsafe code.

Workflow auditcaution

The workflow audit completed without findings or untrusted checkout and script-injection paths. However, all three action references are unpinned and the workflow grants top-level write permissions, creating a mild reproducibility and token-scope concern.