esi/librariesio

Release historycaution

The package has had no registry release in about 2 years and 9 months, with no releases in the last 12 months. This materially raises freshness and maintenance risk despite the repository showing recent activity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Recent pull-request activity and a recent repository push partly offset this, but direct commit momentum remains weak.

Workflow auditcaution

All 16 analyzed action references are unpinned, which weakens build reproducibility and action supply-chain hygiene. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, and one workflow uses read-only permissions.