ernestdefoe/waymark

Maintainerscaution

Only one registry maintainer is listed, which leaves limited publishing redundancy; the repository is user-owned rather than organization-backed.

Release historycaution

The package is 0 days old with four releases clustered within hours, so it has not yet demonstrated sustained maintenance or a settled release cadence.

Repo commit activitycaution

The repository reports zero commits and zero active maintainers in the last three months. Because the package is 0 days old, this mainly shows that sustained maintenance has not yet been demonstrated.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a package intended for forum deployments.

Workflow auditcaution

Both workflows were analyzed cleanly with no untrusted checkout, script injection, or audit findings, but one workflow grants top-level write permissions. That is a mild hygiene concern without an observed untrusted trigger or sink.