mydevnl/audit-routes

Release historycaution

Only two releases exist, with no releases in the last 12 months and a median interval of about 96 days. The repository was pushed more recently, but the registry cadence still suggests limited ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Although the repository is not archived and has a recent push outside that window, the current activity gap raises abandonment risk.

Security policycaution

No security policy is present in the repository. This is a transparency gap for a package focused on auditing application routes, though it does not by itself indicate unsafe code.

Version stabilitycaution

The assessed version is a prerelease, and all recent releases are prereleases. That signals an API that may still change and is less mature for a dependency.

Workflow auditcaution

All three workflows were analyzed without high-severity findings or untrusted checkout and script-injection paths. However, all 14 action references are unpinned and one workflow grants top-level write permissions, creating avoidable workflow-maintenance risk.