roadrunner/centrifugo

Release historycaution

This is the package's first release, published today, with only one release recorded. That leaves little evidence of release reliability or established maintenance.

Repo bus factorcaution

One contributor made 100% of recent commits, creating concentration risk. The organization-owned repository partly offsets this because maintenance can be handed off within the project.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. For a package released today this may reflect its recent creation, but it provides weak evidence of sustained maintenance.

Workflow auditcaution

All six workflows were analyzed without audit failures or dangerous findings, and there are no untrusted checkouts or script injections. However, all 10 action references are unpinned and one workflow grants top-level write access, creating a moderate workflow-hygiene concern without an observed untrusted sink.