bgeneto/ci4-audits

Release historycaution

The package has 12 releases, but none in the last 12 months and its latest registry release was about 18 months ago. This indicates stalled maintenance for a library dependency.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, reinforcing the evidence of prolonged inactivity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is not evidence of a vulnerability.

Workflow auditcaution

All 31 analyzed GitHub Actions references are unpinned, which weakens build reproducibility and exposes CI to dependency drift. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings.