oat-sa/extension-tao-outcomekeyvalue

Release historycaution

The package has existed since 2015 with 38 releases, but only one release in the last 12 months, indicating a currently slow cadence despite its long history.

Repo bus factorcaution

All recent commits came from one contributor, creating a narrow operational base. Organization backing provides some ability to hand maintenance off, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent development activity even though the repository was recently updated.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and disclosure guidance undocumented.

Workflow auditcaution

All four workflows were analyzed and have no untrusted checkout or script-injection findings, but all seven action references are unpinned and the release workflow inherits secrets with high-confidence medium severity. The lack of top-level permissions is not harmful on its own.