oat-sa/lib-tao-qti

Release historycaution

The package has a substantial history of 94 releases since 2016, but it had no registry releases in the last 12 months despite a median interval of about 14 days. That is a meaningful sign of slowed maintenance.

Repo bus factorcaution

All one recent commit came from a single contributor, leaving no demonstrated contributor redundancy in the measured period. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating very limited recent development activity. This conflicts with the repository's recent push and organization backing but still lowers maintenance confidence.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, although it is not evidence of a vulnerability itself.

Workflow auditcaution

All three workflows were analyzed without high-confidence findings or untrusted checkouts, and none grants top-level write access. However, all seven action references are unpinned, leaving workflow dependencies exposed to tag or branch changes.