infinityloop-dev/graphpinator-tokenizer

Release historycaution

The package has released seven times since 2020, including one release in the last 12 months, but the cadence is limited for a maintained dependency. This supports caution rather than indicating abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. Although a recent release exists, the lack of current source activity lowers confidence in ongoing maintenance.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous sinks or audit findings, but all 11 action references are unpinned. The lack of a top-level permissions block is acceptable on its own, while unpinned actions weaken reproducibility and update control.