infinityloop-dev/graphpinator-parser

Maintainerscaution

Only one registry account has publishing access, which is a narrow publishing base. The repository is organization-owned, so this is partly compensated by project backing rather than treated as a severe risk.

Release historycaution

The package has six releases since March 2021 and one release in the last 12 months, with the latest published on December 16, 2025. This shows continued release activity but a modest cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release provides some evidence of maintenance, but the current pause raises abandonment and response-time concerns.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkouts, injection findings, or high-confidence audit issues. However, all 11 action references are unpinned, weakening build reproducibility and making workflow dependencies harder to control.