harugon/gtm

Release historycaution

The package has had no registry release in the last four years, which weakens confidence that fixes and repository changes reach consumers. Its six-release history shows an established project but does not offset the current release gap.

Security policycaution

The repository has no security policy, which leaves vulnerability-reporting expectations unclear. This is a transparency gap, but the small extension and available security scanning reduce its weight.

Workflow auditcaution

All four analyzed action references are unpinned, and the release workflow uses an archived action; these are reproducibility and maintenance-hygiene concerns. No untrusted checkout or script-injection path was found, so this is not a severe workflow risk.