postboy/spool-memory

Release historycaution

This is a single-release package first and last released about 4 years 5 months ago, with no releases in the last 12 months; that materially raises abandonment risk.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and weakening evidence of ongoing maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, though not severe enough to outweigh the maintenance evidence on its own.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both of its action references are unpinned, which leaves build inputs less reproducible and warrants a hygiene caution.