castor/uri

Release historydanger

The package has had no releases in the last 12 months, and its latest release was on October 13, 2022, indicating roughly four years without a new release. This materially raises abandonment risk despite four releases overall.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and suggesting little current maintenance capacity.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented. This is a transparency and maintenance gap, though it is partly offset by the repository's Psalm security scanning.

Workflow auditcaution

All five analyzed action references are unpinned, reducing build reproducibility and increasing exposure to changed upstream actions. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-confidence workflow findings.