lumaserv/proxmoxve

Release historydanger

The package has had no release in about 9 years, with zero releases in the last 12 months. This is strong evidence that maintenance has effectively stopped.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, reinforcing the abandonment concern shown by the release history.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a meaningful transparency gap for an API client.

Workflow auditcaution

All 3 analyzed action references are unpinned, which weakens build reproducibility. The high-confidence template-injection findings are hygiene concerns here because no untrusted checkout or dangerous trigger was reported.