goldendeveloper/spotify

Release historydanger

The package has only one release, published about four years ago, with no releases in the last 12 months. That is strong evidence of limited ongoing release maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This leaves current maintenance capacity unclear despite the repository being unarchived.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings, dangerous triggers, or injection sinks. However, both action references are unpinned, which leaves a modest workflow supply-chain hygiene gap.