rtckit/sdp

Release historycaution

The package has had only two releases, both on January 5, 2024, with none in the last 12 months. This strongly suggests the release line is inactive, although the repository was pushed later in 2024.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, but it is a secondary concern for a small library and does not outweigh its licensing, tests, and tooling.

Version stabilitycaution

Version 0.1.1 is not a stable-major release, which leaves more compatibility uncertainty than a mature 1.x package. It is not marked as a prerelease, providing some compensation.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts or script injection, but all five action references are unpinned and one archived action was found with high confidence. These are meaningful workflow hygiene risks, not proof that the package is unsafe.