kcs/metadata

Release historycaution

The package has 24 releases since 2016, but none in the last 12 months; the latest release was about 19 months ago, which raises maintenance concern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, providing no recent evidence of ongoing maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; the package's tests and established release history provide only partial compensation.

Workflow auditcaution

All 9 analyzed action references are unpinned, weakening build reproducibility, although there are no untrusted checkouts, script injections, dangerous triggers, or high-severity findings.