escolalms/pencil-spaces

Release historycaution

Only three releases have appeared since August 2023, with no release in roughly two years and seven months. That long gap is meaningful for maintenance risk despite the package having a documented release history.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the prolonged release gap. This is a concrete sign that fixes or compatibility updates may be slow.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it does not by itself show that the package is unsafe.

Workflow auditcaution

All 10 analyzed action references are unpinned, which weakens build reproducibility. However, the audit found no untrusted checkouts, script injection, dangerous triggers, or high-confidence workflow findings, so this remains a hygiene caution rather than a severe risk.