battis/hydratable

Release historycaution

Only two releases exist, with none in the last 12 months and the latest published in December 2023. This is a meaningful freshness concern for a dependency, despite the repository still being present.

Repo commit activitycaution

There were no commits or active maintainers in the last three months. This weakens the evidence of ongoing maintenance, although the repository's recent push prevents treating it as clearly abandoned.

Security policycaution

No repository security policy was found. For a small library this is a modest transparency gap, not a standalone reason to reject the package.

Workflow auditcaution

All three workflows were analyzed with no dangerous audit findings or untrusted checkouts, but all 11 action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene concerns rather than severe risks in the absence of an untrusted sink.