firehed/clock

Release historycaution

This is the only release, published about 2 years and 6 months ago, with no releases in the last 12 months. That weakens evidence of ongoing maintenance, although the package may be intentionally stable.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, consistent with the long gap since the only release and raising abandonment risk.

Security policycaution

No security policy is present. This is a modest transparency gap for a dependency, but it is partly offset by the repository's Dependabot configuration.

Workflow auditcaution

All 3 workflows were analyzed with no detected audit findings or untrusted checkouts, but all 14 action references are unpinned, leaving avoidable build-integrity risk.