codelicia/depreday

Release historycaution

Only two releases were published, both in April 2020, with no releases in the last 12 months. This is a substantial maintenance and abandonment concern despite the repository still being available.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That provides little evidence of ongoing maintenance for a package whose latest registry release is already years old.

Repo issue activitycaution

There were no new or merged pull requests in the last month, while 10 pull requests remain open. The backlog is a warning sign that repository activity is not translating into maintained releases.

Security policycaution

The repository has no security policy. This is a transparency gap, although it is less serious than the package's prolonged release and commit inactivity.

Workflow auditcaution

All five workflow action references are unpinned, and the audit found a high-confidence template-injection issue. No untrusted checkout or script-injection trigger was reported, so this is a workflow hygiene concern rather than a severe standalone risk.