cline/suspend

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single registry maintainer is consistent with the observed project backing but leaves a thin apparent ownership base.

Release historycaution

The package has four releases, concentrated over roughly two weeks with a median interval of about 23 hours, but no release since 2026-03-18—around six months ago. This early burst followed by a long pause raises maintenance uncertainty.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the last push around six months ago, this is meaningful evidence of currently quiet maintenance.

Repo toolingcaution

The repository uses Composer and just for build work, but no security-scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, and it does not use broad top-level write permissions. However, all 8 action references are unpinned, leaving avoidable workflow supply-chain exposure.