facade/ignition

Release historydanger

The package has 145 releases since August 2019, but none in the last 12 months and its latest release was over three years ago. The historically frequent cadence shows maturity, but the prolonged release gap is a substantial maintenance concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This leaves little evidence of ongoing maintenance capacity.

Repository archivedcaution

The linked repository is not archived, which avoids a severe abandonment signal. Its last push in February 2023 still indicates that activity has effectively stopped.

Workflow auditcaution

All three workflows were analyzed and have no untrusted checkouts or script injection, but all nine action references are unpinned; the audit also found a high-confidence unpinned container image and a medium-confidence archived action. These are release-process hygiene risks, not evidence that the package itself is malicious.