bytestream/horde-translation

Release historydanger

The latest registry release was December 21, 2021, with no releases in the last 12 months. This is a substantial maintenance concern despite the repository having a later push recorded.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months, reinforcing the long gap in published releases and indicating limited current maintenance.

Repo package mentioncaution

The repository name does not match the package name and no README package mention was found, so ownership of the linked source is not clearly established. A subpackage or monorepo layout could explain this, but the collected evidence does not show that.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures unclear. This is a transparency gap rather than evidence of a security defect.

Workflow auditcaution

All 3 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, dangerous trigger, or high-severity issue to compound this risk.