ffans/community-notes

Release historycaution

This is the package's first registry release, published less than one day ago, so there is no release track record yet; the linked repository is present but equally new.

Repo commit activitycaution

The repository records zero commits and zero active maintainers in the last three months, but the project was only created less than one day ago, making this an absence of history rather than evidence of abandonment.

Security policycaution

The repository has no security policy, which reduces published guidance for reporting vulnerabilities; this is a transparency gap but not a severe dependency risk on its own.

Version stabilitycaution

The assessed version is a prerelease beta, and all recent releases are prereleases, so compatibility and production stability are not yet established.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of the two referenced actions are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.