drupol/yaroc

Release historycaution

The package has 14 releases and a short historical median interval, but its latest release was in April 2021 with no releases in the last 12 months. This is a meaningful maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating currently inactive development. The repository was pushed in September 2023, which provides some older activity but does not offset the recent gap.

Security policycaution

No security policy was found in the repository, reducing transparency about vulnerability reporting and response. This is a hygiene and maintenance gap rather than evidence that the package is unsafe.

Workflow auditcaution

All 16 analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action in the release workflow. The workflows have no untrusted checkout or script-injection findings, which limits the risk.