reagordi/env

Release historycaution

This package has only one release, published about 2 years and 4 months ago, with no releases in the last 12 months. That leaves limited evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, and its latest push was about 2 years and 2 months ago. This is a meaningful maintenance concern despite the repository not being archived.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing little supporting evidence of community adoption or external review. Low popularity is only a supporting concern and does not outweigh the clearer maintenance signals.

Workflow auditcaution

All six analyzed workflows use unpinned actions, which weakens build reproducibility. However, there are no untrusted checkouts, script injections, dangerous triggers, or audit findings, so this remains a hygiene concern rather than a severe risk.