cwp/agency-extensions

Release historycaution

The package has a long history with 51 releases, but it has had no release in the last 12 months. That recent release gap lowers confidence in continued maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. This suggests recently paused development, although the repository is not archived and has a recent recorded push.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence of a vulnerability by itself.

Workflow auditcaution

All 7 analyzed action references are unpinned, which weakens build reproducibility. The workflows have no detected dangerous sinks or high-severity findings, and 6 use read-only permissions, limiting the impact to hygiene.