owenvoke/brightid

Release historydanger

The package has only one release, published about four years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, although the repository remains available.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, following a last push in September 2022. That sustained inactivity materially raises the chance that issues and compatibility problems will go unaddressed.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these very low adoption signals provide little indication of an active user or contributor community.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, but not severe on its own.

Workflow auditcaution

Both workflows were analyzed without detected audit findings or untrusted checkouts, and neither grants top-level write access. However, all seven action references are unpinned, which weakens build reproducibility and supply-chain hygiene.