prinsfrank/object-resolver

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. With the latest release nearly a year before collection, this is meaningful evidence of currently quiet maintenance.

Release historycaution

The package has six releases over about two years, but only one release in the last 12 months. That indicates a slower release cadence and adds some maintenance uncertainty.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance undocumented. This is a modest transparency gap rather than a release-blocking issue.

Version stabilitycaution

Version v0.0.6 is not a prerelease, but the package remains below a stable major version. Consumers should expect that compatibility guarantees may still be limited.

Workflow auditcaution

Both workflows were analyzed successfully and have no untrusted checkout or script-injection findings, but both action references are unpinned and one high-confidence medium-severity finding reports inherited secrets. These workflow hygiene and credential-scope issues lower confidence in the release process.