momh/shroud-spip

Release historycaution

Only two releases appeared on the same day, so there is not yet evidence of a sustained release cadence or long-term maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the preceding three months. Because the package itself is only a day old, this mainly shows that sustained maintenance is not yet demonstrated rather than proving abandonment.

Security policycaution

No security policy is present, leaving disclosure guidance unspecified. This is a transparency gap, but it is less significant for a newly published small package than evidence of abandoned development would be.

Version stabilitycaution

Version v0.1.1 is an early 0.x release, which signals an immature API and greater likelihood of breaking changes than a stable major release.

Workflow auditcaution

The single workflow was fully audited with no dangerous triggers or findings, but all three action references are unpinned, weakening build reproducibility and supply-chain hygiene.