professional-wiki/message-builder

Release historycaution

The package has only two releases, both published within about one day in February 2025, followed by no releases in the last 12 months. That limited history and long pause reduce confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old release history, this is meaningful evidence of a currently inactive project.

Security policycaution

The repository has no security policy. This is a transparency gap, though the package's small scope and available static analysis provide some compensating evidence.

Workflow auditcaution

The workflow audit completed fully and found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings. However, all 10 analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene.