cycle/annotated

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, which is a meaningful maintenance concern despite the recent registry release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

All 8 analyzed action references are unpinned, creating avoidable workflow supply-chain drift. One workflow has top-level write permissions, but the audit found no untrusted checkout or injection sink, so this is a hygiene concern rather than a severe risk.