oire/app-attest

Release historycaution

The package is less than one day old with only two releases, so there is not enough history to establish durable maintenance or release reliability.

Repo commit activitycaution

There were no commits and no active maintainers in the preceding three months. Because the package was only released within the last day, this mainly indicates insufficient history rather than established abandonment.

Workflow auditcaution

All two workflows were analyzed without high-confidence findings or untrusted checkout and script-injection sinks. However, all three action references are unpinned, and one release workflow has top-level write permissions, creating a moderate reproducibility and credential-scope concern.