butterfly-team/ignition

Release historycaution

This package has only one release, published 2 years 4 months ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers during the last 3 months, consistent with the package's one-release history and indicating stalled maintenance.

Security policycaution

The repository has no security policy. This is a transparency gap for a package that renders application error pages, although it is less serious than evidence of abandoned code.

Workflow auditcaution

All 15 action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image findings. The pull_request_target workflow has top-level write permissions, but no untrusted checkout or script injection was detected.