imedge/inventory

Package scaffoldingcaution

The artifact includes tests and a README, but the README is only 14 characters and the project has no changelog. Tests are a positive maintenance signal; the minimal documentation still weakens consumer transparency.

Release historycaution

The package has made six releases since July 2024, but none in the last 12 months; the latest release was about 17 months ago. This is a meaningful maintenance concern despite the earlier roughly monthly cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. That raises abandonment risk, though the repository is not archived.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations unspecified. This is a transparency gap, not evidence of a security defect.

Workflow auditcaution

All six analyzed action references are unpinned, so workflow behavior can change without a package release. The audit found no dangerous triggers, untrusted checkouts, script injection, or other findings, which limits this to a hygiene concern.