dmk/mktools

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, indicating a meaningful recent maintenance gap despite the recent package release history.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, though it does not by itself show abandonment.

Workflow auditcaution

All 11 analyzed action references are unpinned, and the audit found a high-confidence template-injection pattern in the release workflow. No untrusted checkout or script-injection sink was reported, so this is workflow hygiene risk rather than a severe standalone dependency verdict.