fragotesac/zf1-progressbar

Release historycaution

This is the package's only release, published in September 2024, with no releases in the following 12 months. That limited history reduces evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a package that has not seen recent development.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it does not by itself show that the code is unsafe.

Workflow auditcaution

The audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow, and all five analyzed action references are unpinned. There are no untrusted checkouts or script-injection findings, but the workflow hygiene still warrants caution.