czproject/runner

Release historycaution

The package has existed since 2016 and has eight releases, but its latest release was about 15 months ago with no releases in the last 12 months. That suggests slowing maintenance rather than abandonment by itself.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months. This is meaningful maintenance evidence, although the recent registry release and non-archived status partly compensate.

Security policycaution

The repository has no security policy. This limits vulnerability-reporting transparency, though the package is small and the missing policy does not by itself indicate abandonment.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned. The absence of top-level permissions is acceptable on its own, while unpinned actions remain a modest supply-chain hygiene gap.