larva/agent

Release historycaution

The package is only 14 days old with three releases and a median interval of about 7.5 days, showing active initial iteration but not yet demonstrating long-term maintenance maturity.

Repo bus factorcaution

One contributor made all 12 commits in the last three months, creating a concentrated maintenance risk; organization ownership provides some handoff capacity but does not remove the current single-contributor dependency.

Repo popularitycaution

The repository has zero stars, forks, and watchers, indicating little visible adoption or external validation; this is supporting caution rather than a verdict because popularity is not required for a small stable package.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

Two workflows request top-level write permissions and one lacks a top-level permissions declaration, which weakens least-privilege transparency even though dangerous workflow patterns were not detected.