backstage/tools

Release historycaution

The package has 14 releases but none in the last 12 months, with the latest release about 14 months ago. This is a meaningful maintenance concern for a young package, despite its initially frequent release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent recorded push shows the repository is not archived, but it does not demonstrate ongoing development.

Version stabilitycaution

Version v0.1.5 is not a stable major release, indicating an immature API and a higher likelihood of breaking changes. It is not marked as a prerelease, which partly offsets the concern.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions; the audit also found a high-confidence bot-conditions issue. No untrusted checkout or script-injection sink was found, so this is workflow hygiene and supply-chain caution rather than a severe standalone risk.