gheith3/omancities

Release historydanger

The package has had only two releases, both in November 2021, with no releases in nearly five years. That strongly raises abandonment risk for a framework-integrated package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in November 2021. This is strong evidence that maintenance has stopped.

Maintainerscaution

The registry lists one maintainer. The repository is user-owned rather than organization-backed, so there is limited visible redundancy if that maintainer stops supporting the package.

Repo popularitycaution

The repository has 4 stars, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these figures provide little evidence of broad community review or backup maintenance.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in the CI workflow. There were no untrusted checkouts or script-injection findings, so this is a hygiene concern rather than a standalone severe dependency risk.