josecl/claveunica

Release historycaution

This is the package's only release, published about four years ago, with no releases in the last 12 months. The lack of release activity materially raises abandonment risk.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.

Security policycaution

The repository has no security policy. For an OAuth2 integration package, this is a modest transparency gap, though it is not evidence of a security defect by itself.

Workflow auditcaution

The single workflow was fully analyzed with no detected sinks or audit findings, but both of its action references are unpinned. That leaves avoidable build-integrity and maintenance exposure.