metamodels/attribute_tags

Release historycaution

The project has 25 releases over roughly 13 years, but none in the last 12 months; the latest release was about 18 months ago, indicating a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, which raises abandonment risk despite the project having a long release history.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though automated Dependabot scanning provides some compensation.

Workflow auditcaution

The audit completed all one workflow and found no untrusted checkout or script-injection paths, but all six action references are unpinned and a high-confidence unsound-condition finding was reported.