dragon-code/github-notifications

Release historycaution

The package has 20 releases over roughly two and a half years, but only one release in the last 12 months, indicating a notably slowed cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful sign of currently weak maintenance activity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented.

Workflow auditcaution

All six workflows were analyzed without injection findings, but all 13 action references are unpinned and three workflows grant top-level write permissions, weakening build reproducibility and token minimization.