kerox/spotify

Release historycaution

This is the package's only release, published over seven years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a dependency.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency, though this is secondary to the much older release and commit history.

Workflow auditcaution

The sole workflow was fully analyzed with no high- or medium-confidence findings, but all four action references are unpinned. The missing top-level permissions block is acceptable on its own.