digilist/dependency-graph

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly compensates for this pause, but the lack of current development activity is a maintenance concern.

Security policycaution

The repository has no security policy. For a small library this is not severe by itself, but it reduces transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The workflow audit analyzed all one workflow with no untrusted checkout, injection, or high-severity findings. However, all 6 action references are unpinned, leaving avoidable build-integrity risk.