romanchehh/yaroc-v4

Release historycaution

The package has six releases in the last 12 months, but they were concentrated in a brief initial burst and there is no evidence of sustained release activity afterward.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, indicating that maintenance has currently stopped or become inactive.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 16 analyzed action references are unpinned, and one high-confidence medium-severity finding reports an archived action in the release workflow. The workflows have no top-level permissions blocks, which is acceptable on its own, and no untrusted checkout or script-injection paths were found.