krubio/perfect-flash-bs-5

Release historycaution

This is the only release, published about three years ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance and raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but current maintenance is not demonstrated.

Security policycaution

The linked repository has no security policy. For a small package this is a transparency gap, although the repository does use Sonar security scanning.

Workflow auditcaution

Both workflows were analyzed without untrusted checkouts or script injection, but all five action references are unpinned and one high-confidence finding identifies an archived action. These are workflow maintenance and reproducibility concerns, not evidence of a compromised package.