deepeloper/tunneled-webhooks

Release historydanger

The package has had no releases in the last 12 months, and its latest release was over two years ago. Its earlier five-release history provides some maturity, but does not offset the prolonged pause.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Maintainerscaution

Only one registry account can publish the package, which creates a thin publishing base. The matching repository and consistent release history provide some backing, but no broader maintainer capacity is shown.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a package that handles webhooks and tunneling.

Workflow auditcaution

The workflow was fully analyzed with no dangerous audit findings, job-level permissions, and no untrusted checkout or injection paths. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.