bk2k/iconset-bootstrap

Release historycaution

Only two releases have been published across about three years, with one release in the last 12 months and a median interval of about 2 years 5 months. This indicates a slow maintenance cadence, though the latest release is recent.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The repository was pushed recently, but the measured short-term activity still suggests limited ongoing maintenance.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a meaningful but non-severe governance gap for a small package.

Workflow auditcaution

All 8 of 8 action references are unpinned, and the audit found a high-confidence template-injection issue in the publish workflow. No untrusted checkout or script-injection trigger was found, so this is a hygiene concern rather than a severe standalone risk.