petebishwhip/native-cli

Registry deprecationdanger

The registry marks the entire package as abandoned and provides no clear deprecation explanation; this is a severe adoption risk even though a replacement name is listed.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the package's abandoned registry status and raising maintenance risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while one issue and two pull requests remain open; this supports the picture of weak current activity.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package, so the package-to-source relationship is not clearly established despite the repository's organization backing.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the audit found two high-confidence template-injection findings. No untrusted checkout or script-injection trigger was reported, so this is a hygiene and build-integrity concern rather than a standalone severe finding.