evansmwenda/weight-conversions

Maintainerscaution

One registry maintainer is consistent with the repository being owned by the same individual, but it also indicates a thin maintenance base.

Release historycaution

Only two releases were published, both in October 2024, with no releases in the last 12 months; this limits evidence of ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, reinforcing the broader evidence that maintenance has stalled.

Security policycaution

No security policy was found, leaving vulnerability reporting instructions less explicit for consumers.

Workflow auditcaution

All four workflows were analyzed, but the audit found high-confidence bot-condition and unpinned-image issues; all eight action references are unpinned and three workflows grant top-level write access. The pull_request_target workflow had no untrusted checkout or script-injection sink, so this is workflow hygiene risk rather than a severe standalone failure.