blinq/synth

Release historydanger

The package has had no releases in the last 12 months, and its latest release was over three years ago. Eight total releases show some prior activity, but the long release gap raises abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the old last push and absent recent releases, this is strong evidence of stalled maintenance.

Security policycaution

The repository has no security policy. That is a transparency gap for a package that handles application files and an OpenAI API key, although it does not by itself show abandonment.

Workflow auditcaution

All 10 action references are unpinned, three workflows grant top-level write access, and the audit found a high-confidence bot-condition issue. The pull_request_target workflow has no untrusted checkout or script-injection sink, so this is workflow hygiene and maintenance risk rather than a standalone severe risk.