common-gateway/open-index

Release historycaution

The package has had no registry releases in the last 12 months, and its latest release was nearly two years ago. Its earlier 16 releases show initial activity but do not offset the current pause.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the nearly two-year gap since the last push. This indicates a meaningful abandonment risk, though the repository is not archived.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That leaves some uncertainty about whether this repository directly backs the published package, even though the repository owner and registry namespace align.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting and handling security issues, although the absence of such a policy is not by itself evidence of an unsafe release.

Workflow auditcaution

All 24 analyzed action references are unpinned, and one high-confidence medium-severity finding identifies an archived action; two low-severity findings install packages outside a lockfile. No untrusted checkout or script-injection paths were found, which limits the impact.