elemind/flux-blade-icons

Release historycaution

The package is 182 days old but has only one release, so there is not enough release history to demonstrate sustained maintenance. Its recentness partly explains the limited history but does not remove the uncertainty.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful sign of currently limited maintenance activity. The repository was pushed more recently overall, so this indicates a pause rather than clear abandonment.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response. Its small, new project scope limits how serious this gap is, but no provided signal compensates for it.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions; a high-confidence bot-conditions finding also affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, so these are workflow hygiene and automation risks rather than a severe standalone threat.