helhum/config-loader

Release historycaution

The package has a substantial history with 22 releases since July 2016, but it has had no release in the last 12 months, which lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with a currently inactive project and increasing abandonment risk.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version v0.12.6 is not a prerelease, but the package remains below 1.0, so compatibility expectations are somewhat weaker than for a stable-major release.

Workflow auditcaution

The sole workflow was fully analyzed without dangerous triggers or audit findings, but all three action references are unpinned, leaving avoidable build-integrity risk.