razorpay/slack

Name lookalikedanger

The package is flagged as borrowing the identity of razorpay/razorpay, with 26% artifact overlap and far fewer monthly downloads. Consumers may have intended the established package instead, making this a severe supply-chain and adoption risk.

Release historycaution

The package has 28 releases, but none in the last 12 months; its latest registry release was about two years and five months ago. This substantially increases abandonment risk despite its earlier regular cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance even though it is not archived.

Workflow auditcaution

All 2 of 2 analyzed action references are unpinned, leaving build behavior exposed to later upstream changes. The audit was complete and found no untrusted checkout, injection, or severe findings, which limits this to a hygiene concern.