gryfoss/int-combiner

Release historycaution

The package has only two releases, with the latest about 11 months ago and one release in the last 12 months. This suggests limited ongoing maintenance, though the release history is not evidence of abandonment by itself.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months, indicating currently inactive development. The recent release and intact project structure provide some context but do not offset the maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response guidance undocumented. This is a transparency gap, although the small package scope limits the significance compared with a larger dependency.

Workflow auditcaution

All 5 analyzed action references are unpinned, which weakens build reproducibility and update control. The workflow has no untrusted checkout, script injection, or high-severity audit findings, so this is a hygiene concern rather than a severe risk.