islenbo/cachetool

Release historydanger

The package has 67 releases since September 2014, but none in the last 12 months; its latest release was about five years ago. This materially raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating no observed ongoing maintenance.

Maintainerscaution

Only one registry publishing account is listed. That is not proof of abandonment, but it leaves little visible publishing redundancy when recent activity is absent.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a maintenance and transparency gap, though not severe on its own.

Workflow auditcaution

The single workflow has all 6 action references unpinned, plus a high-confidence template-injection finding and a low-confidence cache-poisoning finding. The audit completed fully and found no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe dependency risk.