atendwa/whitelist

Release historycaution

This is the package's only release, published 474 days ago, with no releases in the last 12 months. That makes ongoing maintenance and compatibility harder to establish.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but recent maintenance is not demonstrated.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection findings, which limits the severity.