jeherve/nostr-verify

Release historycaution

This is the package's only release, published about 3 years and 4 months ago, with no releases in the last 12 months. The repository remains available, but the registry history indicates meaningful maintenance risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Its last push was about 9 months ago, which provides limited compensation but does not show current development.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 2 issues and 1 pull request remain open. This supports the picture of currently limited project activity.

Security policycaution

The linked repository has no security policy. For a small plugin this is a transparency gap, though it is partly offset by the repository's visible workflows and build configuration.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous sinks or audit findings, but all 11 action references are unpinned. The absence of top-level permissions blocks is acceptable here because neither workflow grants top-level write access.