kevinpapst/kimai2-console

Release historycaution

The package has 10 releases since January 2020, but no release in the last 12 months; the latest registry release was over a year ago. This is partly offset by recent activity in the linked repository.

Repo package mentioncaution

The linked repository is named `kimai/cli`, does not match the package name, and does not mention this package in its README. The release notes explain that the project moved there, but the package-to-repository relationship remains less transparent.

Security policycaution

The linked repository has no security policy. This is a transparency and maintenance gap, though it is not by itself evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted-checkout, or severity findings, and it has no broad write permissions. However, both referenced actions are unpinned, reducing build reproducibility and supply-chain hygiene.