mainlycode/health-bundle

Release historycaution

The package has existed since May 2021 but has only six releases, with one release in the last 12 months and a median interval of about 10 months. Recent publication prevents this from indicating abandonment, but the cadence is slow.

Repo bus factorcaution

All eight recent commits came from one contributor, so maintenance depends heavily on a single active developer. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence of an active security problem.

Version stabilitycaution

Version 0.5.0 is not a prerelease, which is positive, but the package remains below a stable major version and may carry more compatibility risk than a mature 1.x release.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout, injection, or audit findings. However, all 12 action references are unpinned, leaving builds exposed to action updates or replacement.