norialabs/platform

Release historycaution

The package is less than one day old, with eight releases and a median interval of about 36 minutes. That shows active initial publishing but provides no evidence of sustained maintenance yet.

Repo commit activitycaution

The repository reports zero commits and zero active maintainers in the last three months, which is concerning for maintenance capacity. However, the repository is newly created and has eight merged pull requests in the last month, so this is not evidence of abandonment by itself.

Security policycaution

The linked repository has no security policy. That reduces transparency for reporting and handling vulnerabilities in a package providing authentication, tenancy, and database functionality.

Version stabilitycaution

Version v0.1.7 is not a stable major release, so its API and behavior may still change substantially. It is not marked as a prerelease, which partly offsets that concern.

Workflow auditcaution

The single workflow was fully analyzed, scopes permissions at the job level, and has no untrusted checkout or injection findings. All four action references are unpinned, creating a modest build-integrity hygiene concern.