ml/bluesky-notifier

Release historycaution

This is the package's only release, published about three months ago, so there is not yet evidence of an established release cadence. Its recent age partly limits the significance of that gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. With only one release, this is an early but meaningful maintenance warning.

Repo toolingcaution

The project uses Make and Composer, showing build tooling, but no security-scanning tools were detected. That is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a package that integrates with an external messaging service, this weakens the documented path for reporting security issues.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, leaving their exact revisions uncontrolled; the missing top-level permissions block is not concerning on its own.