iranimij/openlabel-hyva-bundle

Maintainerscaution

One registry maintainer is listed, which concentrates publishing responsibility. The matching user-owned repository provides some continuity, but no broader maintainer base is shown.

Release historycaution

The package is only 0 days old with two releases, so there is not yet enough release history to demonstrate sustained maintenance. Recent publishing is a modest positive, but it does not establish maturity.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Because the repository itself is only 0 days old and has three merged pull requests in the last month, this is mainly a lack of track record rather than evidence of abandonment.

Security policycaution

No security policy is present in the repository. This is a transparency gap for reporting vulnerabilities, though it is less serious for a newly published small bundle than for a mature security-sensitive library.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected injection or high-severity findings. Its one action reference is unpinned, which is a minor reproducibility and supply-chain hygiene gap.