eloquage/chunk

Dangerous workflowscaution

One of six workflows uses pull_request_target for Dependabot auto-merge. No untrusted checkouts or script injection were detected, so this is a contained workflow risk rather than a severe health issue.

Release historycaution

The package was released only once, on the assessment day, so there is no release track record or demonstrated maintenance cadence yet.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, but the release and repository update are both from the assessment day; this leaves maintenance capacity unverified rather than showing a long-term collapse.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence, but the package is too new for low popularity to establish abandonment by itself.

Security policycaution

No security policy is present, leaving vulnerability-reporting guidance unclear for consumers and maintainers.