cline/math

Maintainerscaution

Only one account has registry publish access, which is a thin publishing base. The linked repository is user-owned rather than organization-backed, so no provided signal offsets that concentration.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although the package had recent releases earlier in its history, the current inactivity raises maintenance risk.

Repo toolingcaution

The repository uses Composer and Just for build tasks and includes a security policy, but no security-scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, leaving avoidable workflow supply-chain exposure.