keen-io/keen-io-bundle

Release historycaution

The package has 11 releases over about 12 years, but none in the last 12 months and its latest release was in July 2024. This indicates a currently inactive release cadence, though the long history shows the project is established.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the lack of recent releases. This is a meaningful maintenance concern for a dependency.

Security policycaution

The repository has no security policy file. That reduces transparency for reporting and handling vulnerabilities, although it is a hygiene gap rather than evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no detected injection or high-severity findings, and it has no top-level write permissions. However, all 4 action references are unpinned, leaving the workflow exposed to changes in referenced action content.