dek-cz/title-control

Release historydanger

The latest release was in March 2021, with no releases in the last 12 months; this is a substantial maintenance concern for a dependency, despite five releases overall.

Licensecaution

The artifact contains a license file, but it is detected as MIT while the manifest declares BSD-3-Clause. The release is licensed, yet the mismatch creates legal and transparency uncertainty.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, although the repository was pushed in August 2024; current maintenance capacity appears limited.

Security policycaution

The repository has no security policy, which is a transparency gap for reporting vulnerabilities, though this small package has tests and a direct, limited dependency profile.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, leaving build inputs less reproducible.