robtimus/multipart

Release historycaution

The package is about 8 years old but has only 3 releases, with a median interval of about 3 years 8 months; one release in the last 12 months shows it is not abandoned, but cadence is slow.

Repo bus factorcaution

All 7 recent commits came from one contributor, so maintenance depends heavily on a single person; individual ownership does not provide organizational handoff capacity here.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkout or script-injection findings, but every one of 21 action references is unpinned and the audit found a high-confidence unpinned container image.