atendwa/settings

Release historycaution

The package has five releases over about 15 months, but none in the last 12 months. That suggests maintenance has slowed materially despite a previously regular release interval.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, weakening evidence of ongoing maintenance.

Security policycaution

The repository has no security policy, reducing transparency for vulnerability reporting and response.

Workflow auditcaution

All 12 analyzed action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no reported untrusted checkout or script-injection sink, so this is caution rather than a severe workflow risk.