axy/random

Maintainerscaution

Only one registry publishing account is listed, which is a limited publishing base. The organization-owned repository provides some backing, so this is a modest concern rather than a severe risk.

Release historycaution

The package has only 3 releases, with none in the last 12 months and the latest published in March 2023. This indicates a mature but inactive release cadence and lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the old latest release and suggesting maintenance has stalled.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap for a dependency.

Workflow auditcaution

The sole workflow was fully analyzed with no reported audit findings or untrusted sinks, but both action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk without indicating an immediate severe problem.