jamielsharief/chronos

Release historydanger

The latest release was published nearly five years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency expected to receive maintenance.

Licensecaution

The manifest declares MIT, while the artifact license file is detected as Apache-2.0; although a license file exists, the mismatch creates legal ambiguity for adopters.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. This materially raises the risk that defects will remain unresolved.

Security policycaution

The repository has no security policy, which reduces transparency about vulnerability reporting and maintenance expectations. The small, inactive project provides no supplied evidence that compensates for this gap.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous findings, but both analyzed action references are unpinned. That leaves the build exposed to changes in referenced actions over time.