orchestra/facile

Release historydanger

The package has 37 releases since June 2013, but its latest registry release was in April 2021 and it had no releases in the following 12 months of the scan window. This is a substantial abandonment concern for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the three months before collection, consistent with the release history showing no activity since April 2021. The long gap materially raises maintenance risk.

Security policycaution

The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, though it is less severe than the package's inactivity.

Workflow auditcaution

Both workflows were analyzed successfully and contain no untrusted checkouts, script-injection findings, or write-wide permissions. However, all six action references are unpinned, leaving avoidable build reproducibility and action-substitution risk.