cardinalby/content-disposition

Maintainerscaution

Only one registry maintainer account is listed, which leaves a thin publishing base. The linked repository is owned by the matching individual account, so this is a modest resilience concern rather than a severe ownership gap.

Release historycaution

The latest release was published in May 2023, with no releases in the following approximately three years and four months. This is a meaningful maintenance concern, though the package has three releases and remains stable.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with the long release gap and indicating inactive maintenance.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting and response expectations undocumented. This is a transparency and maintenance gap, not evidence of unsafe behavior.

Workflow auditcaution

The complete audit found no dangerous triggers, untrusted checkouts, script injection, or audit findings, but all three action references are unpinned. That weakens build reproducibility while the rest of the workflow posture is clean.