kdabrow/time-machine

Release historycaution

The package has made no release in about 2 years and 4 months, despite eight releases since 2020. This is meaningful evidence of possible maintenance stagnation for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, but recent maintenance capacity is not demonstrated.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it does not by itself make the package unfit.

Workflow auditcaution

The single workflow was fully audited with no reported findings or dangerous triggers, but 5 of 10 action references are unpinned. That leaves avoidable build-integrity exposure while remaining a hygiene concern rather than a severe risk.