greatcode/gcurl

Release historycaution

The package is brand new, with only two releases and less than 12 hours between the first and latest release. This provides too little history to establish durable maintenance.

Repo bus factorcaution

One contributor made all seven commits in the last three months. This concentrated maintenance base increases continuity risk, although organization ownership provides some potential handoff capacity.

Security policycaution

The repository has no security policy. For a native extension handling network and browser-fingerprint functionality, this is a meaningful transparency gap.

Version stabilitycaution

Version v0.1.2 is not a prerelease, but the 0.x major version indicates an early-stage API and limited maturity.

Workflow auditcaution

The audit covered both workflows without failures and found no untrusted checkouts or script injection, but all 14 action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene and supply-chain exposure concerns, not a severe risk on their own.