mozakar/l5-swagger

Release historycaution

The package has only one release, published about one year ago, so there is limited evidence of an established release process or sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, leaving no recent activity evidence to offset the single-release history.

Security policycaution

The repository has no security policy, which is a transparency gap for reporting and handling vulnerabilities, though it is not evidence of abandonment by itself.

Workflow auditcaution

The sole workflow grants top-level write permissions and all three action references are unpinned, creating modest reproducibility and token-scope concerns. The audit found no untrusted checkouts, injection sinks, or other recorded findings, so this is not a severe workflow risk.