corpus/router

Release historycaution

The package has only 4 releases across roughly 9 years, with a median interval of about 3 years; one release in the last 12 months and the recent v1.2.0 release provide some evidence of ongoing maintenance.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, which weakens the maintenance picture despite the recent release and repository push.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear; Dependabot provides some compensating security tooling but not a reporting process.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings, but both of its 2 action references are unpinned, weakening supply-chain reproducibility.