cobraprojects/quest

Release historydanger

This is the sole release, published over two years ago, with no releases in the last 12 months. That leaves meaningful uncertainty about compatibility and ongoing maintenance.

Repo commit activitydanger

The repository has had zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Repo popularitycaution

The repository has no stars or forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no evidence of a broad active user base.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, not evidence that the package is unsafe.

Workflow auditcaution

Both analyzed workflows use unpinned container images, including a floating latest tag, with high-confidence findings. The workflows have no untrusted checkout or script-injection paths, which limits the concern to build reproducibility and action hygiene.