ottaviano/faker-gravatar

Release historycaution

The latest release was about 20 months ago, with no releases in the last 12 months. The package has six releases since 2019, so this indicates slowing maintenance rather than clear abandonment.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. For a small utility this may reflect stability, but it leaves little recent evidence of ongoing maintenance.

Security policycaution

The repository has no security policy. This is a transparency gap, although the package is small and the workflow audit found no direct security findings.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, injection findings, or high-severity issues, but all 3 of its 3 action references are unpinned. That leaves avoidable build-integrity exposure.