k2oumais/lei

Maintainerscaution

Only one registry maintainer is listed. For a user-owned project this is not inherently abnormal, but it leaves limited visible publishing capacity if that maintainer becomes unavailable.

Release historycaution

The package has had 3 releases, all concentrated within about 4 days, and none in the last 12 months; the latest release was about 3 years 6 months ago. This suggests stalled maintenance despite a stable 1.0.2 version.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no update for about 3 years 6 months. This raises abandonment risk.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, although it is less severe for a small package with no reported security findings here.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 5 action references are unpinned and one workflow grants top-level write permissions, so workflow hygiene is weaker.