cataphract/rar

Release historycaution

Only three releases have appeared over about six months, with the latest released in March; this is a modest maintenance record for a dependency.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a meaningful recent maintenance gap.

Repo toolingcaution

The project uses make, just, and Composer for builds, but no security scanning tools were detected, leaving security hygiene less visible.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling security issues.

Workflow auditcaution

All 20 workflow action references are unpinned, weakening build reproducibility. The audit also found high-confidence template-injection patterns in the release workflow, although no untrusted checkout or dangerous trigger was reported.