grrr-amsterdam/garp3

Release historydanger

The package has 383 releases since March 2016, but none in the last 12 months and its latest registry release was over three years ago. The historically frequent cadence does not compensate for the prolonged recent silence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence of likely abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a genuine transparency gap, though it is secondary to the much older maintenance record.

Workflow auditcaution

The single workflow was fully analyzed without untrusted checkout or script-injection triggers, but all four action references are unpinned and six high-confidence template-injection findings were reported. These workflow hygiene issues add supply-chain maintenance risk even without a dangerous trigger combination.