brotkrueml/codehighlight

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a concrete maintenance concern despite the recent repository push and established release history.

Security policycaution

The repository has no published security policy. This weakens vulnerability-reporting transparency for a maintained extension, though it is not evidence that the package is unsafe.

Workflow auditcaution

All five workflows were analyzed successfully, with no untrusted checkouts, script injections, dangerous triggers, or audit findings. However, all 12 action references are unpinned, leaving workflow dependencies exposed to upstream changes; the absence of top-level permissions blocks is acceptable here because no workflows grant top-level write access.