blood72/blade-minify

Maintainerscaution

Only one registry maintainer is listed, leaving limited observable publishing capacity for a user-owned project. This is a modest concern rather than a severe risk because the repository and package owner match.

Release historycaution

The package has six releases but none in the last 12 months, with the latest published about five years ago. This is a meaningful maintenance concern, partly offset by the stable release history and an exact-version release note.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This raises abandonment risk even though the project is not archived.

Security policycaution

No security policy was found in the repository. That weakens vulnerability-reporting transparency, although it does not by itself show unsafe code or abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both of its two action references are unpinned. This is a supply-chain hygiene gap without evidence of an exploitable workflow path.