eloquage/onnx

Dangerous workflowscaution

One of six workflows uses pull_request_target for Dependabot auto-merge, creating a workflow-risk surface, although no untrusted checkout or script injection was detected.

Release historycaution

The package was released only hours ago and has just one release, so there is not yet evidence of sustained maintenance or release stability.

Repo commit activitycaution

There were no commits and no active maintainers during the prior three months, but the repository and release are newly created, so this is an absence of history rather than evidence of a long-abandoned project.

Repo popularitycaution

The repository has zero stars, forks, and watchers. For a package released only hours ago this is unsurprising, but it provides no independent adoption signal yet.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented. This is a transparency gap, though it does not by itself indicate unsafe code.