danc0/clyde

Release historydanger

The latest release was on July 18, 2024, with no releases in the following two years, despite 21 releases overall. This is a substantial abandonment concern for a still-pre-1.0 CLI framework.

Package scaffoldingcaution

The package has a README, tests, and a GitHub release with notes for this version, which provide useful consumer and change visibility. However, the README explicitly says documentation is incomplete and the project is a work in progress.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the prolonged release gap and indicating no recent maintenance capacity.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is not evidence of malicious behavior.

Workflow auditcaution

Both workflows use read-only permissions and have no dangerous triggers or audit findings, but all four analyzed action references are unpinned. That leaves build inputs less reproducible and increases workflow supply-chain exposure.