odder/lighthouse-scalars

Release historydanger

The package has had no releases in the last 12 months, and its latest release was published in March 2024 despite being assessed much later. This is meaningful abandonment risk, although the four-release history shows an initial burst of activity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long gap since the latest release. No provided maintenance signal compensates for this inactivity.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, not evidence of a security incident.

Version stabilitycaution

Version 0.1.3 is not a stable-major release, so its API may still change and the project has not demonstrated mature compatibility guarantees. It is not marked as a prerelease, which provides limited compensation.

Workflow auditcaution

The only workflow was fully analyzed with no injection or high-severity findings, but all 6 action references are unpinned. The absence of a top-level permissions block is acceptable here, while unpinned actions remain a supply-chain hygiene gap.