molych/gendiff

Maintainerscaution

Only one registry account has publish access, and the repository is user-owned rather than organization-backed. This leaves little visible publishing capacity if the maintainer becomes unavailable.

Release historycaution

The package has made no release in nearly six years and has had zero releases in the last 12 months. Its early releases were frequent, but the prolonged inactivity is a substantial abandonment concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, which provides only limited compensation.

Security policycaution

No security policy is present in the linked repository, reducing transparency for reporting and handling vulnerabilities. The package's MIT declaration addresses licensing but does not compensate for this process gap.

Workflow auditcaution

All five analyzed action references are unpinned, and the audit found a high-confidence archived action. No dangerous trigger or untrusted checkout was found, but the workflow supply-chain hygiene remains weak.