romanpiller/hlavolamy

Release historycaution

The package is only 78 days old and has two releases, both published on the same day. This shows recent activity but provides limited evidence of sustained maintenance.

Repo bus factorcaution

One contributor made all three recent commits, giving the project a single-person maintenance dependency. The repository is user-owned rather than organization-backed, so there is no provided evidence of a handoff path.

Repo commit activitycaution

The repository had three commits in the last three months, showing some recent maintenance but not a strong ongoing activity pattern.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The workflow audit completed fully, uses read-only permissions, and found no dangerous triggers or audit findings. However, all three action references are unpinned, leaving build inputs less reproducible.