mrgoodbytes8667/response-bundle

Licensecaution

The release declares CC-BY-NC-4.0 and includes a license file, so it is licensed rather than opaque. The noncommercial restriction can still prevent use in commercial projects.

Release historycaution

The package has 78 releases since October 2020, but none in the last 12 months and the latest registry release was nearly two years ago. Recent repository commits partly offset the release gap, but published maintenance is stale.

Repo bus factorcaution

One contributor made 100% of the last three months' commits, creating a meaningful continuity risk for a user-owned project with no organization backing shown.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. Existing tests and recent commits provide some compensation but do not replace a reporting path.

Workflow auditcaution

All 22 analyzed action references are unpinned, and high-confidence findings include secrets inheritance and archived actions; the low-confidence cache findings are hygiene concerns rather than decisive risks. Workflows were fully analyzed and have no untrusted checkout or script-injection findings.