inmanturbo/instances

Release historycaution

Only two releases exist, both on August 12, 2024, with no releases in the last two years. That is meaningful evidence of slow maintenance for a package still being considered for adoption.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long release gap, this raises abandonment risk.

Security policycaution

The repository has no security policy. This is a modest transparency gap for a dependency, though the available build tooling provides some compensating project hygiene.

Version stabilitycaution

Version v0.0.2 is not a stable-major release, so the package is still at an early maturity level despite not being marked as a prerelease.

Workflow auditcaution

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. Three workflows also grant top-level write permissions; the pull_request_target trigger has no untrusted checkout or script-injection sink, limiting the severity.