gollumsf/serializer-describe-attribute-bundle

Release historycaution

The package is only 179 days old with two releases and a median interval of about 154 days, so its long-term maintenance pattern is not yet established.

Repo bus factorcaution

One contributor made all recent commits, leaving maintenance concentrated in a single person; organizational ownership provides some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is limited activity, although it coincides with a recent release and does not yet show abandonment.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is not evidence that the package is unsafe.

Workflow auditcaution

All 10 analyzed workflows use unpinned actions, which weakens build reproducibility. However, the audit found no untrusted checkouts, script injection, write-scoped top-level permissions, or other reported findings.