plaisio/cgi-core

Release historycaution

The package has 11 releases since November 2019, but none in the last 12 months; the latest release was about 15 months ago. This indicates a meaningful maintenance slowdown, though the project is not clearly abandoned.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months, reinforcing the release gap and increasing the risk of slow fixes.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency. This is partly offset by the repository's tests and otherwise clean workflow audit, so it is a moderate concern rather than a severe risk.

Workflow auditcaution

The workflow audit completed cleanly, with read-only permissions and no untrusted checkouts or injection findings. However, all 4 action references are unpinned, leaving avoidable supply-chain hygiene risk.