dragon-code/pretty-array

Release historycaution

The package has 29 releases since January 2020, but none in the last 12 months and the latest registry release was about 19 months ago. This slows confidence in ongoing release maintenance, though the repository was pushed more recently.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months. The recent repository push is reassuring, but the absence of observed commit activity still weakens current maintenance confidence.

Security policycaution

No security policy is present in the repository. This is a transparency gap, although the package does use Dependabot and the missing policy is not by itself evidence of unsafe code.

Workflow auditcaution

All five workflows were analyzed with no high-confidence audit findings or untrusted checkouts. However, all 9 action references are unpinned, and two workflows grant top-level write permissions, creating moderate workflow supply-chain hygiene concerns.