bellangelo/example-pie-extension

Release historycaution

The package made nine releases within a short initial window, but has had no releases in the last 12 months and no release activity since January 2025. This suggests the project may be finished or abandoned rather than actively maintained.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. This materially lowers confidence in ongoing maintenance.

Security policycaution

The repository has no security policy. For a small extension this is a transparency gap, though it is less severe than the observed inactivity and workflow pinning issues.

Workflow auditcaution

The audit covered both workflows without high-severity findings, and no untrusted checkout or script injection was found. However, all 13 action references are unpinned and one workflow grants top-level write permissions, creating avoidable maintenance and supply-chain exposure.