powerbuoy/sleek

Release historydanger

The latest registry release was over five years ago, with no releases in the last 12 months. That is a substantial abandonment concern for a package being adopted at this version.

Licensecaution

The package declares GPL-2.0-or-later and includes a license file, but the detected file text is GPL-3.0. The release is licensed, though the declaration and file should be reconciled before adoption.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, which provides little evidence of ongoing maintenance despite the later repository push recorded elsewhere.

Workflow auditcaution

The single analyzed workflow has no untrusted trigger or audit finding, but all 6 referenced actions are unpinned. That leaves routine build dependencies exposed to changes in upstream action references.