chevere/var-support

Release historycaution

Only three releases have been published over about 2 years and 10 months, with one release in the last 12 months and a median interval of about 14 months. The recent 1.0.2 release shows the project is not abandoned, but the cadence is sparse.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although version 1.0.2 was recently released, the lack of recent development activity warrants caution about ongoing maintenance.

Security policycaution

No repository security policy is published. This is a transparency gap, though it is less severe than an archived or deprecated project.

Workflow auditcaution

Both workflows were analyzed successfully with no detected injection, untrusted-checkout, or high-confidence audit findings. However, all 7 action references are unpinned, leaving builds exposed to reference changes.