botasis/runtime

Release historydanger

The package has 28 releases since March 2023, but none in the last 12 months; the latest release was nearly two years ago, which lowers confidence in active maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release gap and indicating currently stalled maintenance.

Security policycaution

No SECURITY.md or equivalent security policy was found. That is a transparency gap for a library handling bot updates and integrations.

Version stabilitycaution

Version 0.12.0 is not a stable major release, but it is not marked as a prerelease and recent releases have not been prereleases. This is a modest maturity concern rather than a severe risk.

Workflow auditcaution

All three workflows were analyzed without high-confidence findings or untrusted checkouts, but all nine action references are unpinned. That weakens reproducibility and supply-chain hygiene, while the absence of a top-level permissions block is acceptable on its own.