mineadmin/security-bundle

Release historydanger

The package has had no release in roughly 2 years and 5 months, with zero releases in the last 12 months. Only three releases overall indicate limited demonstrated maintenance continuity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last 3 months, consistent with the prolonged release gap and raising abandonment risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although this can occur with subpackages, the lack of an explicit connection weakens provenance transparency.

Security policycaution

The repository has no security policy. For a security and authentication bundle, this is a meaningful transparency and vulnerability-reporting gap.

Workflow auditcaution

All three analyzed action references are unpinned, and a high-confidence medium-severity archived action was found in the release workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not independently dangerous.