becklyn/assets-bundle

Release historycaution

The package has 25 releases since 2017, but none in the last 12 months and the latest registry release was in January 2023. This indicates a substantial release-maintenance gap despite the earlier regular cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. Although its recent push timestamp shows repository activity of some kind, the observed commit window does not demonstrate ongoing development.

Security policycaution

The linked repository has no security policy. That is a transparency and vulnerability-reporting gap, though it does not by itself show that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings, but both of its two action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a build-integrity hygiene concern.