dragon-code/card-number

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. The recent release and June push provide some counterevidence, but the lack of current development activity is a maintenance caution.

Security policycaution

The repository has no security policy. That is a transparency and vulnerability-reporting gap, though it is not evidence that the package is unsafe by itself.

Workflow auditcaution

All 8 analyzed action references are unpinned, which weakens build reproducibility. Two workflows grant top-level write permissions, but there are no untrusted checkouts, script injections, or audit findings, so this remains a hygiene caution rather than a severe risk.