laravie/streaming

Release historycaution

The package has had no registry releases in about six years, despite 12 releases overall; this is a substantial maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap, though it is less serious than the maintenance slowdown.

Workflow auditcaution

Both analyzed workflows use unpinned container images with high-confidence findings. There are no untrusted checkouts or script injections, so this is a workflow hygiene concern rather than a severe release risk.