grezlikowski/page-speed

Project backingcaution

The repository is owned by the same individual namespace as the package, with no organization backing shown. This is consistent ownership, but it leaves a small apparent support base.

Release historycaution

Only two releases exist, both published within about two days in March 2026, with no later registry release during the following months. This is a meaningful maintenance concern for a package released as stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the short release history, this raises abandonment risk.

Security policycaution

No security policy was found in the repository. That is a transparency gap for a package that handles an API key and exposes a web panel, though it is not severe on its own.

Workflow auditcaution

All nine analyzed action references are unpinned, and three of four workflows grant top-level write permissions. The audit also found a high-confidence bot-condition issue in the pull_request_target Dependabot workflow; there was no untrusted checkout or script injection.