defro/colourlovers

Release historydanger

The package has only two releases, both published nearly four years ago, with no release in the last 12 months; this is a significant maintenance concern.

Repo commit activitydanger

The repository has recorded no commits and no active maintainers in the last three months, consistent with a project that has been inactive for nearly four years.

Repo popularitycaution

The repository has zero stars and forks and only one watcher; popularity is supporting evidence rather than decisive, but it provides little indication of an active user or contributor base.

Security policycaution

The repository has no security policy, reducing transparency for reporting vulnerabilities in a package that has otherwise stopped receiving visible maintenance.

Workflow auditcaution

The single workflow was fully analyzed, has read-only permissions, and has no reported dangerous findings, but both action references are unpinned, leaving avoidable update risk.