galaxy/horizon

Release historydanger

Only one release exists, published about 3 years and 8 months ago, with no releases in the last 12 months; this is a substantial maintenance concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last 3 months, indicating that maintenance has effectively stopped.

Workflow auditdanger

All five workflows were analyzed, but all six action references are unpinned and a high-confidence audit finding reports an unpinned container image; two workflows also grant top-level write permissions, increasing build-integrity risk.

Maintainerscaution

One registry publishing account is listed, which limits publishing redundancy, although the linked repository is user-owned and registry access records do not establish actual maintenance activity.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to compensate for the thin maintainer and inactive-project signals.