robyajo/pasak

Maintainerscaution

One registry maintainer is consistent with this user-owned repository, but it leaves little visible publishing redundancy if that maintainer becomes unavailable.

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no provided evidence of institutional backing to compensate for the single-maintainer profile.

Release historycaution

Twenty releases were published within one day, with a median interval of about 4 minutes; this shows active publishing but provides little evidence of an established release cadence.

Repo commit activitycaution

The repository records zero commits and zero active maintainers in the last three months; because the package is newly published, this is partly explained by its age but still leaves maintenance capacity unproven.

Workflow auditcaution

The workflow audit found no dangerous triggers, untrusted checkouts, injection findings, or write-wide permissions, and one workflow scopes permissions read-only. However, all 6 of 6 action references are unpinned, weakening build reproducibility and action supply-chain control.