byteshard/contracts

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, while the latest release was about 8 months ago. This is a meaningful maintenance concern, though the recent release history provides some offsetting evidence.

Security policycaution

The repository has no security policy. For a small contracts library this is a transparency and vulnerability-reporting gap, but it is not by itself evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all four action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a supply-chain hygiene weakness.