ixarlie/mutex-bundle

Project backingcaution

The registry namespace and repository are owned by the same individual account, so the package has clear ownership but no organizational backing shown by the provided evidence. This leaves a relatively narrow continuity base.

Release historycaution

The package has existed since 2016 with 20 releases, but only one release in the last 12 months. That indicates a slower maintenance pace rather than abandonment, especially given the recent release.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the current maintenance capacity remains uncertain.

Security policycaution

No security policy is present in the repository. For a bundle integrated into application request handling, this is a transparency gap, though it is not evidence of an unsafe release by itself.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings or dangerous triggers, but all six action references are unpinned. Missing top-level permissions blocks are acceptable on their own; unpinned actions remain a workflow hygiene concern.