hosmelq/ext-anydoc

Release historycaution

The package is only 45 days old, but it has shipped 8 releases in that period with a median interval of about 1.3 days, showing active early development rather than abandonment.

Repo bus factorcaution

All 17 recent commits came from one contributor, leaving no demonstrated handoff capacity if that maintainer becomes unavailable.

Security policycaution

The repository has no published security policy, which leaves vulnerability-reporting expectations less transparent for a native extension.

Version stabilitycaution

Version v0.2.4 is a non-stable-major release, so compatibility expectations are lower even though it is not marked as a prerelease.

Workflow auditcaution

All four workflows use read-only permissions and the audit found no findings, but one workflow combines pull_request_target with an untrusted checkout and one of 32 action references is unpinned; this warrants workflow hygiene caution rather than a severe risk.