juksgraphic/bladetranslator

Release historycaution

The package has only one release and is hours old, so there is not yet enough history to establish durable maintenance or release stability. Its age makes the absence of older releases expected rather than evidence of abandonment.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, but the repository was created and pushed only hours ago. This limits confidence in long-term maintenance without proving neglect.

Security policycaution

The linked repository has no security policy, leaving the process for reporting and handling security issues unclear. Dependabot provides some compensating security tooling but does not replace a published policy.

Workflow auditcaution

All eight action references are unpinned, and the audit found a high-confidence unpinned container image; three workflows also grant top-level write permissions. There is no untrusted checkout or script injection, so this is a hygiene concern rather than a severe dependency risk.