chfur/studio-addons

Release historydanger

The package has had no release in about four years, with 19 releases concentrated on its initial publication day and none in the last 12 months. This substantially raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no observed recent maintenance.

Maintainerscaution

Only one registry account has publish access, limiting publishing resilience if that account becomes unavailable. This is a supporting concern rather than proof of weak project ownership.

Security policycaution

The repository has no dedicated security policy. The README provides a vulnerability contact, which partly compensates, but the lack of a formal policy leaves security-reporting expectations less transparent.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkout or script-injection findings, but all 9 of 9 action references are unpinned. That is a reproducibility and update-integrity weakness, though not a severe risk by itself.