netlogix/nxsimplecdn

Release historycaution

The package has four releases since March 2023 and one release in the last 12 months, with the latest published on October 31, 2025. This shows continued but relatively infrequent maintenance.

Repo bus factorcaution

All three commits in the last three months came from one contributor, so maintenance could stall if that person becomes unavailable. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

No SECURITY.md or other repository security policy was found, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

Both workflows grant top-level write permissions and all nine action references are unpinned, which weakens workflow reproducibility and expands token scope. The audit found no untrusted checkout, script injection, or other reported findings, limiting the severity.