orieg/judy-polyfill

Release historycaution

The package is only 35 days old with six releases, so its long-term maintenance record is limited; frequent releases over roughly eight days provide some evidence of active development.

Repo bus factorcaution

One contributor made all 25 recent commits, creating a meaningful continuity risk for a young package with no demonstrated backup maintainer.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency but is not by itself evidence of abandonment.

Workflow auditcaution

All 27 analyzed action references are unpinned and three workflows grant top-level write permissions. The audit found no untrusted checkouts, script injection, or high-confidence findings, so this is a hygiene concern rather than a severe risk.