nisshan/nepali-calendar

Release historydanger

This is the package's only release, published about 4 years ago, with no releases in the last 12 months. That long period without a new version raises maintenance and compatibility concerns.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the concern raised by the old release history.

Project backingcaution

The package and repository are owned by the same individual account, so the project has a clear owner but no organization backing shown by this signal.

Workflow auditcaution

All 5 workflows were analyzed, but all 11 action references are unpinned; high-confidence findings also flag spoofable bot conditions and an unpinned container image. No untrusted checkout or script injection was found, limiting the impact to workflow hygiene.