naf/rate-limit

Release historycaution

This is the first and only release, published 0 days ago, so there is no release cadence or track record yet. That reflects limited maturity rather than evidence of abandonment.

Repo commit activitycaution

The repository has 0 commits and 0 active maintainers in the last 3 months, but it was also created and released today. Maintenance capacity is therefore unproven, not demonstrably collapsed.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. The package's tests and documented behavior provide some compensating project evidence, but not a reporting process.

Version stabilitycaution

Version v0.1.0 is an initial 0.x release, which usually means the API and behavior may still change. It is not marked as a prerelease, providing a small amount of stability context but not a mature compatibility record.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no untrusted checkouts, script injection, or high-severity findings. However, all 4 action references are unpinned, leaving avoidable build-integrity exposure.