inmanturbo/modelware

Release historycaution

The package has had four releases, but its latest release was about two years ago and there were no releases in the last 12 months. That weakens confidence in ongoing maintenance for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, even though the repository was pushed recently.

Security policycaution

No security policy was found in the repository. This is a transparency gap, although it does not by itself show that the package is unsafe.

Workflow auditcaution

All five workflows were analyzed, but all 12 action references are unpinned, and a high-confidence bot-conditions finding reports that actor context may be spoofable in the Dependabot auto-merge workflow. These create avoidable workflow hygiene and supply-chain concerns.