jacobfitzp/weight-conversions

Release historycaution

The package has only two releases, both published about three years ago, with no releases in the last 12 months. That limited history and long gap reduce confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was nearly three years ago. This is meaningful abandonment risk for a dependency.

Workflow auditcaution

All 8 analyzed action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull request target workflow has no untrusted checkout or script injection, so these are workflow hygiene concerns rather than severe standalone risk.