beastbytes/wizard

Release historycaution

Only two releases exist, with the latest published on September 3, 2023 and none in the following three years. This creates a meaningful maintenance-continuity concern despite the stable v2.0.0 release.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The repository was pushed more recently, but the observed recent activity still provides weak evidence of ongoing development.

Security policycaution

The linked repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a modest transparency gap, not evidence that the package is unsafe.

Workflow auditcaution

All five workflow action references are unpinned and the workflow grants top-level write access, which weakens build reproducibility and token minimization. The audit found no untrusted checkout, script injection, or other dangerous findings, so this remains a hygiene concern rather than a severe risk.