farzai/breaker

Release historycaution

The package is about 11 months old but has only one release, so there is little evidence of an established release cadence or sustained maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of current maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

All 13 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, limiting the impact to workflow hygiene rather than a severe dependency risk.