fluid-project/hearth-components

Release historycaution

The package has only two releases over 567 days, with one release in the last 12 months and a median interval of about 416 days. The latest release is current, but the sparse history limits evidence of established release maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, despite the repository being pushed recently and a new release existing. The lack of observed development activity is a meaningful maintenance concern.

Repo issue activitycaution

The repository has 12 open pull requests, but none were merged in the last month and no issues were closed during that period. This suggests a backlog and limited recent throughput.

Workflow auditcaution

All 16 analyzed action references are unpinned, and two of five workflows grant top-level write permissions. The audit found no untrusted checkouts, script injection, or high-severity findings, so this is workflow hygiene caution rather than a severe risk.