maximgrynykha/winkill

Project backingcaution

The package and repository are owned by the same individual account, so ownership is clear, though there is no organization backing to broaden maintenance capacity.

Release historycaution

The package has 36 releases but none in the last 12 months; its latest registry release was over two years ago, which raises maintenance risk.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating that development has currently stalled despite the repository being present.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow scopes permissions read-only and has no detected injection or dangerous-trigger findings, but both of its action references are unpinned, weakening build reproducibility and update safety.