mf1dd/object-builder

Release historycaution

The package is only 104 days old and has two releases, both published within minutes on the first day. This shows initial activity but provides little evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. For a package only 104 days old, this leaves ongoing maintenance capacity unproven.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 15 action references are unpinned, leaving the workflow exposed to upstream action changes.