cable8mm/good-code

Release historycaution

There have been 19 releases over roughly 1 year and 8 months, but only one release in the last 12 months. That indicates slower recent delivery despite a substantial release history.

Repo bus factorcaution

One contributor made all two commits in the last three months, giving the project a single-person maintenance concentration. The matching user-owned repository confirms activity but does not provide a second active maintainer.

Repo commit activitycaution

The repository had two commits in the last three months, showing some recent activity but at a modest pace for a maintained library.

Security policycaution

The repository has no published security policy. For a small library this is a transparency gap, though the other collected signals show a maintained and clearly identified project.

Workflow auditcaution

All 11 analyzed action references are unpinned, and one workflow grants top-level write access. The audit found no untrusted checkout, script injection, or high-severity issue, so this is a workflow-hygiene caution rather than a severe risk.