codelabmw/testament

Release historycaution

Only two releases were published, with the latest on January 22, 2025 and none in the following 12 months. This suggests limited ongoing maintenance, though the package is still relatively young.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months, reinforcing the evidence of slowed maintenance.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is partly offset by the small package scope and otherwise visible source project.

Workflow auditcaution

All 6 analyzed GitHub Actions references are unpinned, which weakens build reproducibility and update control. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, so this is a hygiene concern rather than a severe risk.