hametuha/singleton-pattern

Release historycaution

The package has four releases since July 2019, but none in the last 12 months and the latest was published in December 2022. This indicates prolonged inactivity for a dependency that may need compatibility fixes.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release since December 2022. The repository is not archived, but current maintenance capacity is not evident.

Security policycaution

The linked repository has no security policy or published security contact. This is a transparency gap, although the package is small and the available workflow audit found no untrusted checkout or script-injection path.

Workflow auditcaution

The workflow audit completed successfully and found no untrusted checkouts or script injection, but all five action references are unpinned and two archived actions were detected. A high-confidence template-injection finding is additional workflow hygiene risk, though no dangerous trigger was observed.