inhere/sroute

Release historycaution

The package has a substantial history with 42 releases since 2017, but it has had no registry release in the last 12 months; the latest release was about 17 months ago. This lowers confidence in active maintenance without indicating abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although it was pushed recently overall, the current short-term activity is weak and reinforces the stale release cadence.

Security policycaution

No repository security policy was found. This is a modest transparency gap for a maintained dependency, but it is not severe on its own.

Workflow auditcaution

Both workflows were analyzed completely with no reported audit findings or unsafe trigger-and-sink combinations. However, all 4 referenced actions are unpinned, leaving build inputs less reproducible and increasing supply-chain exposure.