modernmcguire/drawbridge

Release historydanger

The package has had five releases, but none in the last 12 months; all releases were clustered around March 2024, leaving a prolonged maintenance gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the registry's lack of recent releases and raising abandonment risk.

Workflow auditdanger

All 12 analyzed action references are unpinned, and one high-confidence finding reports spoofable actor checks in the Dependabot auto-merge workflow. There are no untrusted checkouts or script-injection findings, so this is serious hygiene risk rather than a standalone critical verdict.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little evidence of a broad user or contributor base; this supports, but does not independently establish, the maintenance concern.

Security policycaution

No security policy is present in the repository, which is a transparency gap for a package implementing two-factor authentication.