lara-zeus/mark

Release historycaution

The package has had no registry release in over 15 months, despite six releases during its first 18 days. That long publishing gap raises maintenance risk, though the linked repository was pushed more recently.

Repo commit activitycaution

There were zero commits from active maintainers in the last 3 months, which supports the concern that development has slowed. The repository's later push activity provides some compensating evidence but does not show recent commit work.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions. A high-confidence bot-conditions finding also affects the Dependabot auto-merge workflow, although no untrusted checkout or script-injection sink was found.