nexus-scholar/core

Release historycaution

Five releases arrived within the first 5 days, but no longer release history is available and the package is only 123 days old. This provides limited evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. For a package this new, that is a meaningful warning about sustained maintenance capacity.

Security policycaution

No repository security policy was found. This is a transparency gap for a package that handles external providers and persistence, though it is not evidence of abandonment by itself.

Workflow auditcaution

All 7 action references are unpinned, and one workflow grants top-level write permissions. The audit also reports high-confidence template-injection findings, but template injection alone is workflow hygiene rather than a severe dependency-health risk.