dev-lnk/moonshine-builder

Maintainerscaution

The registry lists one publishing account. Because the repository is user-owned rather than organization-owned, this leaves limited visible publishing redundancy, but registry access alone does not prove the project lacks contributors.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful recent maintenance gap, though the established release history partly offsets abandonment risk.

Security policycaution

The repository has no security policy. This reduces transparency for reporting vulnerabilities, although the package's small scope and other collected project evidence partly limit the impact.

Workflow auditcaution

All three workflows were analyzed, but all seven action references are unpinned and the audit found a high-confidence unpinned container image. This is a workflow hygiene and build-reproducibility concern, not a standalone reason to reject the package.