fond-of-oryx/return-label

Release historycaution

The package has only 3 releases, with the latest over three years ago and none in the last 12 months. This is a meaningful maintenance concern, although the repository was pushed more recently.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, indicating currently quiet development. The recent repository push provides some compensating evidence but does not establish ongoing activity.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented. This is a transparency gap, though it is not by itself a severe dependency risk.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkout or script-injection paths. However, all 3 action references are unpinned, which creates a modest reproducibility and supply-chain hygiene concern.