byteshard/validate

Release historycaution

The package has only two releases over roughly three years, with no release in the 12 months before collection and a median interval of about 744 days. This indicates slow maintenance, though it is not abandonment by itself.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The recent 2025 release provides some evidence of prior activity but does not offset the current pause.

Security policycaution

The linked repository has no security policy, reducing transparency around vulnerability reporting and response. The package's license, source tree, and release notes provide some compensating project documentation but do not replace a reporting process.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all four action references are unpinned. That is a real supply-chain hygiene gap without evidence of a directly exploitable workflow.