hexlet/pairs-data

Release historycaution

The package has only four releases since February 2021, with a median interval of about 327 days; however, two releases arrived in the last 12 months and the latest was published recently.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating some uncertainty that the linked source is specifically for this release.

Security policycaution

The repository has no documented security policy, leaving disclosure and response expectations unclear.

Workflow auditcaution

All four analyzed action references are unpinned, and one workflow has top-level write permissions; the audit found no untrusted checkout, script injection, or high-confidence findings, so this is a hygiene concern rather than a severe risk.