pug/slim

Release historycaution

The package has existed for over 8 years, but only 5 releases with a median interval of about 20 months and 1 release in the last 12 months indicate a slow maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern despite the recent release and repository push.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, weakening build reproducibility and supply-chain hygiene.