chipslays/phrase

Release historydanger

The package has had only three releases, with none in nearly five years; its last release was on August 30, 2021. This is strong evidence of abandonment risk despite the stable version.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the three months before collection, with its last push nearly five years earlier. That sharply lowers confidence in ongoing maintenance.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide no meaningful external evidence of active use or review.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it does not by itself show that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous findings, but its one action reference is unpinned. The missing top-level permissions block is acceptable on its own, while the unpinned action is a minor supply-chain hygiene concern.