marjose123/pitaka

Release historycaution

This is the package's only release, published 542 days ago, with no releases in the last 12 months. That leaves release maintenance and compatibility progress unproven.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed recently, the measured development activity is currently absent.

Security policycaution

The linked repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, though Dependabot provides some compensating security tooling.

Workflow auditcaution

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene and workflow-integrity concern rather than a severe standalone risk.