dpc-sdp/tide_monsido

Release historycaution

The latest registry release was over 3 years ago, with no releases in the last 12 months. This is a meaningful sign of possible abandonment despite the package having 13 releases overall.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, and its last push was in January 2024. That indicates prolonged inactivity for a package consumers may still need maintained.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a modest concern because the package is backed by an organization and has a clear source repository.

Workflow auditcaution

All 8 analyzed action references are unpinned, and high-confidence secrets-inherit findings appear across the workflows. No untrusted checkout or script-injection paths were found, so this is a hygiene and supply-chain caution rather than a severe workflow risk.