rollerworks/x509-validator

Release historycaution

The package has had no registry release in the last 12 months, despite six releases since November 2023; the latest release was about 15 months ago. This indicates a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance, although the repository was pushed more recently than the release history suggests.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, partly offset by the repository's tests and established project structure.

Workflow auditcaution

All 8 analyzed action references are unpinned, and the audit found one high-confidence template-injection issue. The workflows have no untrusted checkouts or script-injection findings, so this is a hygiene concern rather than a severe dependency risk.