pocket-framework/framework

Maintainerscaution

Only one registry account has publish access. With the repository owned by a user rather than an organization, this indicates a thin publishing and continuity base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a release was published recently, the lack of recent commit activity is a meaningful maintenance concern.

Repo popularitycaution

The repository has zero stars and forks and one watcher, indicating little visible adoption. Popularity is supporting evidence only, so this modestly lowers confidence in project maturity rather than determining the verdict.

Security policycaution

The repository has no security policy. This does not show a security defect, but it reduces transparency about how maintainers receive and handle vulnerability reports.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted execution paths. However, all 3 action references are unpinned, which weakens build reproducibility and supply-chain traceability.