jestr-ai/openmage-ai-suite

Release historycaution

This is the first release, published 0 days ago, so there is no release history or cadence demonstrating sustained maintenance. Its newness limits maturity evidence but does not indicate abandonment by itself.

Repo commit activitycaution

The repository has recorded 0 commits and 0 active maintainers in the last 3 months, although the package itself was published 0 days ago; this is insufficient history rather than proof of a collapsed project.

Security policycaution

The repository has no published security policy, reducing transparency for a package that handles store and AI-provider interactions. No other provided signal compensates for this documentation gap.

Workflow auditcaution

All 7 analyzed action references are unpinned, which weakens build reproducibility and update control. The workflow uses read-only permissions and has no detected untrusted checkout, script injection, or high-severity findings, limiting the impact to caution.