bristol-su/static-page

Release historydanger

The latest release was in October 2021, with no releases in the last 12 months, despite nine releases overall. This long release gap is a substantial maintenance concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, and its last push was in March 2023. That supports a strong abandonment concern, although the repository is not archived.

Licensecaution

The package declares MIT, but the included LICENCE.md was detected as GPL-3.0. The presence of a license file is positive, but the mismatch creates a real obligation and compatibility concern.

Security policycaution

The linked repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is less significant because the project is small and the workflow audit found no high-severity issues.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but both of its two action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a minor reproducibility risk.