godbout/alfred-workflow-config

Release historycaution

The package has had no registry release in more than four years, after 11 releases since February 2019. This is a meaningful maintenance concern, though the stable 1.8.0 release and repository evidence provide some continuity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since 2022. This raises abandonment risk for future fixes.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a modest concern for a small, focused package rather than a severe dependency risk.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous sinks or audit findings, but all 3 action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk without making the package unfit on its own.