fast-forward/dev-tools

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, a significant maintenance and abandonment concern despite recent registry releases.

Workflow auditdanger

All 12 workflows were analyzed, but all 74 action references are unpinned and the audit found high-confidence template-injection findings plus secrets inheritance. The pull_request_target triggers have no untrusted checkouts or script-injection counts, so these workflow issues are serious hygiene concerns rather than an automatic critical verdict.

Dependency profilecaution

The package declares 42 runtime dependencies, a sizable dependency surface for development tooling, which increases maintenance burden and transitive exposure.

Repo issue activitycaution

There are 26 open issues and no new issues or closed issues in the last month, although two pull requests were merged. This suggests limited recent issue handling.

Repo popularitycaution

The repository has no stars, forks, or watchers. This limits popularity as supporting evidence, but low popularity alone does not show that a small project is unhealthy.