cuyz/webz

Release historycaution

The latest release was published over five years ago, with no releases in the last 12 months. This is substantial evidence of stagnation for a library dependency.

Repo commit activitycaution

There were no commits from active maintainers in the last three months, reinforcing the evidence that development has stopped or slowed sharply.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a library that handles HTTP and SOAP calls.

Version stabilitycaution

Version 0.12.0 is not a prerelease, but the package remains below 1.0, so API compatibility may still change. The published README also describes the project as experimental.

Workflow auditcaution

Both workflows were fully analyzed with no injection or high-severity findings, but all five action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions weaken build reproducibility.