envor/platform

Release historydanger

The latest registry release is over two years and seven months old, with no releases in the last 12 months. The 26-release history shows prior activity, but the current release stream is stale.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance for a package whose registry releases have also stopped.

Workflow auditcaution

All 12 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection finding, limiting the risk to workflow hygiene rather than a severe conclusion.