pinkcrab/hook-loader

Release historycaution

The package has existed for about five and a half years with nine releases, but only one release in the last 12 months. The recent release offsets some concern, though the longer-term cadence is limited.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance warning despite the recent 1.3.0 release.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with three issues and one pull request still open. This supports the concern that current project activity is limited.

Security policycaution

The repository has no security policy. This is a modest transparency gap for reporting vulnerabilities, but it is not by itself evidence of abandonment or unsafe code.

Workflow auditcaution

All four workflows were analyzed successfully and have no untrusted checkouts, injection findings, or broad top-level writes. However, all nine action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.