mathsgod/hko-weather

Project backingcaution

The package and repository are owned by the same individual account, which is coherent but provides no organizational backing to offset the thin maintenance history.

Release historycaution

This is a young package with one release, published about six months ago, so its release track record and long-term maintenance are unproven.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, leaving ongoing maintenance unproven after the initial release.

Security policycaution

The repository has no published security policy, so users have no documented process for reporting vulnerabilities.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility and trust.