programie/pini

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer represents a relatively thin ownership base.

Release historycaution

The latest registry release was over seven years ago, with no releases in the last 12 months; this is a meaningful freshness and maintenance concern.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which weakens evidence of ongoing development; the non-archived repository partly offsets abandonment risk.

Security policycaution

No repository security policy was found. This is a transparency gap, but it is less significant for a small library with limited runtime dependencies.

Workflow auditcaution

Both workflows use unpinned actions, and both high-confidence findings report inherited secrets; these create avoidable automation hygiene and credential-scope risks. No untrusted checkout, script injection, or broad top-level write permission was found.