inisiatif/enqueue

Package scaffoldingcaution

The artifact includes a README and the repository reports tests, which support basic transparency. The 188-character README is largely placeholder guidance, so consumer documentation remains thin.

Release historycaution

Only two releases have been published, with none in the last 12 months and the latest release about 19 months ago. This indicates a slow release cadence, although the repository was pushed more recently.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months. That weakens evidence of ongoing maintenance despite the recent repository push shown elsewhere.

Workflow auditcaution

All 5 analyzed action references are unpinned, and the Dependabot auto-merge workflow has a high-confidence bot-conditions finding plus top-level write permissions. The pull_request_target trigger has no untrusted checkout or script-injection sink, limiting the impact to workflow hygiene and maintenance risk.