ausi/remote-git

Project backingcaution

The registry namespace and repository owner match, but the repository is owned by an individual rather than an organization. This supports package identity while leaving a relatively narrow backing base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Despite the recent release, this is a meaningful maintenance and abandonment warning.

Security policycaution

The repository has no security policy. For a library that handles remote Git operations, this reduces transparency for reporting and handling vulnerabilities.

Version stabilitycaution

Version 0.2.6 is not a prerelease, but the package remains below a stable 1.0 major version. That indicates some compatibility maturity risk without making the release unsuitable on its own.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkouts or script-injection findings, but all 11 action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions weaken build reproducibility and supply-chain hygiene.