ingenioz-it/edict

Release historycaution

The package has existed for about six years with nine releases, but only one release in the last 12 months indicates a modest maintenance cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful sign of quiet maintenance for a dependency.

Security policycaution

No security policy is present, which is a transparency gap for reporting and handling vulnerabilities, though it is not severe on its own.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkout, script injection, or high-confidence audit findings. However, all seven action references are unpinned, weakening build reproducibility; the absence of top-level permissions is not a concern by itself.