dicibi/eloquent-modification

Release historydanger

The latest release was in March 2024, with no releases in the last 12 months and only three releases overall. This is a substantial abandonment concern for a library dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, reinforcing the prolonged release gap rather than showing ongoing maintenance.

Licensecaution

The artifact contains an MIT license file, but the manifest declares the package proprietary. That contradiction creates avoidable legal uncertainty despite the presence of a recognizable license file.

Workflow auditcaution

All eight analyzed action references are unpinned, and high-confidence findings identify spoofable bot conditions and an unpinned container image. The pull-request workflow also grants top-level write access, so CI hygiene is a meaningful supply-chain weakness.