kanvas/hengen

Release historydanger

Only two releases exist, and none were published in the last four years; the latest release was in January 2022. This is strong evidence of prolonged inactivity for a package consumers may need maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. The unarchived repository does not compensate for the lack of recent work.

Maintainerscaution

One registry account has publish access, which provides little redundancy for release continuity. The organization-owned repository offers some backing, but observed activity remains absent.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling unclear. This is a transparency gap, though it is less serious than the prolonged maintenance inactivity.

Workflow auditcaution

All five analyzed action references are unpinned, and the audit found two high-confidence unpinned container images. The workflow has no unsafe checkout or script-injection trigger, but its reproducibility and build-integrity hygiene remain weak.