astrogoat/cleanhub

Release historycaution

The package has five releases since March 2025, but none in the last 12 months; the latest release was over a year ago. This is a meaningful maintenance concern despite a previously regular median interval of about 31 days.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. That weakens evidence of ongoing maintenance.

Workflow auditcaution

All three action references are unpinned, and the audit found an unpinned container plus high-confidence template-injection findings; one audit file also failed. The workflows have no untrusted checkout or script-injection counts, which limits the severity, but CI supply-chain hygiene is still a concern.