hermesihq/hermesi

Release historycaution

This is the package's first release, published today, so there is no release history or cadence yet; that limits evidence of sustained maintenance but is expected for a new project.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months. Because the release is brand new, this is weak evidence rather than proof of abandonment, but it leaves maintenance capacity unestablished.

Security policycaution

The repository has no security policy. That reduces vulnerability-reporting transparency for a package that handles HTTP requests, authentication, tokens, and event delivery.

Version stabilitycaution

v0.1.0 is not a stable major release, which signals an early API and limited maturity; it is not marked as a prerelease.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions with no high- or medium-confidence findings, but all 6 of 6 action references are unpinned, weakening build reproducibility.