bluemvc/bluemvc-fakes

Release historycaution

The package has six releases since 2018, but its latest release was about four years ago and it had no releases in the last 12 months. That materially raises staleness and abandonment concerns.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with the old registry release, this weakens evidence of ongoing maintenance.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is less severe for a small testing utility than for a security-sensitive library.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers or audit findings, but all three action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.