coisa/factory

Maintainerscaution

Only one individual has registry publishing access, leaving limited observable publishing capacity if that maintainer becomes unavailable.

Release historycaution

The latest release was in December 2021, with no releases in the last 12 months. This is a substantial maintenance concern, although the repository itself was pushed recently.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Recent issue and pull-request activity provides some context, but no completed code changes are visible.

Security policycaution

No repository security policy is present, reducing the transparency of vulnerability-reporting procedures. This is a hygiene gap rather than a severe dependency risk.

Workflow auditcaution

All five analyzed action references are unpinned, so workflow dependencies can change without a reviewed version update. The audit found no untrusted checkouts, script injection, high-severity findings, or top-level write permissions.