castor/io

Release historycaution

The package has six releases, but none in the last 12 months and the latest release was nearly four years ago. Its earlier median interval of about 18 days shows it was once active, so this indicates likely stagnation rather than an immature launch.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided activity signal compensates for this current lack of maintenance.

Repo popularitycaution

The repository has three stars, one fork, and one watcher, indicating limited external adoption. Popularity is supporting evidence rather than a verdict, so this modestly reduces maturity confidence but does not independently make the package unsafe to depend on.

Security policycaution

No security policy is present in the repository. This is a transparency gap, though it is secondary to the maintenance evidence and does not by itself make the release unfit.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. However, all three action references are unpinned, leaving a supply-chain hygiene weakness.