humbug/box

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection, which is a meaningful maintenance warning despite the recent registry releases and repository push date.

Repo issue activitycaution

The repository has 73 open issues and 28 open pull requests, but no new or closed issues or merged pull requests in the last month, indicating a backlog without recent issue-management activity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations less transparent for consumers.

Token permissionscaution

Eight of nine workflows lack top-level token permissions and one workflow declares top-level write access; although no dangerous workflow patterns were detected, this is weaker permission hygiene than an explicitly least-privileged setup.

Version stabilitycaution

This release is explicitly a prerelease beta, while the package's latest version is stable 4.7.0, so adopting it means choosing an older, less stable line without evidence here that it remains the recommended version.