fridaycollective/paywithfriday-lib

Release historydanger

The package has only two releases, both around four years ago, with no release in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, reinforcing the absence of current maintenance activity.

Version stabilitycaution

The assessed release is v0.0.2 and is not a stable major release, so compatibility and maturity remain uncertain alongside the sparse release history.

Workflow auditcaution

All 17 action references are unpinned, which weakens workflow supply-chain hygiene. The only reported cache-poisoning findings are low-confidence, and there are no untrusted checkouts or script-injection findings, so this is not severe on its own.