prinsfrank/simple-template

Release historycaution

This package has only one release, published about 16 months ago, with no releases in the last 12 months. That is a meaningful maturity and maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded no commits and had no active maintainers in the last three months, consistent with a project that may be finished or inactive. No stronger maintenance activity compensates for this.

Workflow auditcaution

Both workflows use unpinned actions, and the CI workflow has a high-confidence medium-severity secrets-inherit finding. There are no untrusted checkouts or script-injection findings, limiting the impact to workflow hygiene rather than a severe risk.