pressbooks/mix

Release historycaution

The latest release was published over four years ago, with no releases in the last 12 months. This is a meaningful maintenance concern despite the package having nine releases and a stable version history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has seen little recent development. The older repository push date reinforces the maintenance concern.

Security policycaution

The linked repository has no security policy. This is a transparency gap, although the package is small, focused, and has no runtime dependencies.

Workflow auditcaution

All three analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning finding has low confidence and therefore adds hygiene concern only, not severe risk.