cable8mm/array-flatten

Release historycaution

The package has only 3 releases since March 2024, with one release in the last 12 months and a median interval of about 424 days. That is slow but not abandonment by itself, especially with a recent latest release.

Repo bus factorcaution

All 2 commits in the last 3 months came from one contributor, giving the project a single-person maintenance dependency. The repository is active, but there is no observed contributor redundancy.

Security policycaution

The repository has no security policy. For a small array utility this is a transparency gap rather than a severe dependency risk, but it leaves vulnerability reporting expectations unclear.

Workflow auditcaution

All 4 workflows were analyzed with no dangerous triggers, sinks, or audit findings, and two workflows use read-only permissions. However, all 7 referenced actions are unpinned, weakening build reproducibility and update safety.