hoogi91/charts

Release historycaution

The package has existed for over seven years with 22 releases, but only one release in the last 12 months. This indicates a mature project with a currently slow release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Although pull requests and a recent release provide some compensating evidence, the absence of direct commit activity raises maintenance risk.

Repo issue activitycaution

There were six new pull requests in the last month, but none were merged and no issues were closed. This shows contributor interest without clear evidence of completed maintenance.

Workflow auditcaution

All eight workflows were analyzed, but all 14 action references are unpinned. The audit also found high-confidence bot-condition and template-injection findings; the pull_request_target workflow had no untrusted checkout or script-injection count, so these are workflow hygiene concerns rather than standalone severe risks.