inisiatif/contract

Release historycaution

The package has had four releases since June 2023, but none in the last 12 months; the latest release was over two years ago. This is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. That weakens evidence of ongoing maintenance.

Workflow auditcaution

The audit found a high-confidence bot-conditions issue in a pull_request_target workflow, alongside top-level write permissions and all five action references being unpinned. No untrusted checkout or script injection was found, so this is a caution rather than a severe health verdict.