responsive-sk/hdm-boot

Release historycaution

The package has only one release, published about 15 months ago, with no releases in the last 12 months. That weakens evidence of ongoing maintenance, despite the repository remaining available.

Repo issue activitycaution

There is one open issue and no issue or pull-request activity in the last month. Combined with the single-release history, this gives limited evidence of active project response.

Repo popularitycaution

The repository has one star, no forks, and no watchers. Popularity is not required for a healthy small package, but these numbers provide little independent evidence of broad adoption or support.

Version stabilitycaution

Version v0.9.0 is not a stable major release, which suggests the API may still change. It is not marked as a prerelease, so this is a moderate maturity concern rather than a severe one.

Workflow auditcaution

The single workflow was fully analyzed with no injection sinks or audit findings, but all seven action references are unpinned. Missing top-level permissions is acceptable on its own, so the pinning gap is the main workflow concern.