hamrocdn/sdk

Release historycaution

All three releases occurred within roughly 12 hours, followed by no newer release evidence across the remaining package lifetime. The concentrated initial release activity provides limited evidence of sustained maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, despite this being a relatively young package. That raises maintenance and abandonment concerns.

Workflow auditcaution

The only workflow combines pull_request_target with an untrusted checkout, creating a meaningful workflow-hygiene concern; all 4 of 4 action references are also unpinned. Read-only job permissions and no reported audit findings reduce, but do not remove, the risk.