cognito/evalmath

Release historycaution

The package has five releases but none in the last 12 months, with the latest release published over a year ago. This indicates a meaningful maintenance slowdown, although it is not yet evidence of abandonment on its own.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. That weakens evidence of ongoing maintenance and raises the risk that issues will remain unattended.

Repo popularitycaution

The repository has one star, zero forks, and one watcher. Popularity is only supporting evidence, but this very small footprint provides little external evidence of sustained use or review.

Security policycaution

The repository has no documented security policy. This is a transparency and response-process gap, though it does not by itself show that the code is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both of its two action references are unpinned. That leaves avoidable build-reproducibility and action-substitution risk.