justcoded/scramble

Release historycaution

The package is about 596 days old but has only four releases, with one release in the last 12 months and a median interval of about 158 days. That is a sparse maintenance history for a package still marked v0.4.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. With only one release in the last 12 months, this points to recently stalled maintenance.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence of a security incident by itself.

Version stabilitycaution

v0.4 is not a stable major release, which signals a less mature API and greater compatibility risk for dependents.

Workflow auditcaution

Both workflows were analyzed successfully with no high-confidence audit findings or untrusted-trigger sinks. However, all five action references are unpinned, so workflow dependencies can change without a fixed revision.