rosell-dk/exec-with-fallback

Licensecaution

The artifact contains a license file, but it is detected as GPL-3.0 while the manifest declares MIT. The mismatch creates a material licensing concern for adopters.

Release historycaution

The latest release was in December 2021, with no releases in the last 12 months. That long release gap lowers confidence in ongoing maintenance, although the package has five releases and is on a stable major version.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. This supports a meaningful maintenance concern, even though the repository is not archived.

Security policycaution

The repository has no security policy. For a small library this is a transparency gap, though it is less serious than the observed maintenance and licensing concerns.

Workflow auditcaution

The audit analyzed all eight workflows with no untrusted checkouts, script injection, or reported findings. However, all 39 action references are unpinned, leaving avoidable build-integrity exposure.