bizley/cookiemonster

Release historycaution

The package has four releases since May 2015, but no registry release in the last five years; this indicates a slow and potentially stale release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the repository not being archived.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

Both workflows were fully analyzed without dangerous triggers or audit findings, but all 6 of 6 action references are unpinned, leaving build inputs exposed to future upstream changes.