mbvb1223/chat-ai-multiclient

Maintainerscaution

Only one registry account has publish access. That is a thin publishing base for a package integrating several fast-changing external APIs.

Release historycaution

This is the package's only release, published 568 days ago, with no releases in the last 12 months. That leaves little evidence of continued maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, despite the package being over a year old. The inactive development history raises abandonment risk.

Security policycaution

The repository has no security policy, so there is no documented channel or process for handling vulnerabilities. This is a transparency gap, though it does not by itself make the release unfit.

Workflow auditcaution

The single workflow grants top-level write permission and all 6 action references are unpinned. The audit found no untrusted checkout, injection, or high-confidence findings, so this is a hygiene concern rather than a severe risk.