roave/no-leaks

Release historycaution

The latest registry release was about three years ago, with no releases in the last 12 months, which raises maintenance and compatibility concerns. The repository was pushed recently, providing partial compensation but not evidence of a new published release.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating weak recent development activity. The recent repository push and current release notes provide some evidence of maintenance but do not remove the concern.

Security policycaution

The repository has no published security policy, which modestly reduces transparency for reporting and handling vulnerabilities.

Workflow auditcaution

Both workflows were analyzed without failed files or high-severity findings, and neither uses risky untrusted triggers. However, 5 of 7 action references are unpinned, leaving a moderate reproducibility and workflow supply-chain hygiene gap.