psx/cache

Release historydanger

The package has had no release in over 7 years: its latest release was December 2018, with zero releases in the last 12 months. Its four-release history suggests a mature but inactive package rather than an actively maintained one.

Maintainerscaution

One registry account has publish access. The repository is owned by an organization, which makes a short registry maintainer list normal publishing hygiene, but it does not demonstrate active maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the long release gap and indicating limited current maintenance capacity.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a dependency, although the absence does not by itself show that the code is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 4 action references are unpinned. The missing top-level permissions block is acceptable on its own and no write-wide permissions were found.