cline/settings

Maintainerscaution

One registry publisher provides a thin publishing base, which limits resilience if that person becomes unavailable; the repository is also owned by an individual account, with no organizational backing shown.

Release historycaution

Only two releases appeared across the package's 189-day history, with the latest release about six months ago. This provides limited evidence of sustained maintenance.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, while the latest release was about six months ago. This is the strongest evidence of weakening maintenance momentum.

Repo toolingcaution

The repository uses Composer and Just for build tasks, but no security-scanning tooling was detected. That is a modest transparency and maintenance gap rather than a severe risk.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, leaving avoidable supply-chain drift.