imjoehaines/flowder

Release historydanger

The package has only two releases, with the latest in February 2020 and none in the last 12 months. This substantially raises abandonment risk for a dependency, despite the repository remaining available.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the old release history, this points to very limited ongoing maintenance.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, although the package is small and the repository otherwise exposes its source and tests.

Workflow auditcaution

All nine analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene. The audit found no untrusted checkouts, script injection, or excessive top-level write permissions, limiting the impact to caution.