rvdv/nntp

Release historycaution

The package has been maintained since 2014 and released recently, but only one release appeared in the last 12 months. This supports continued availability while indicating a slower cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and repository push provide some compensating evidence, but current development activity remains a concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All five workflows were analyzed, references are pinned, and no untrusted checkout or script-injection paths were found. However, a medium-confidence high-severity bot-conditions finding reports that actor context may be spoofable in the Dependabot merge workflow.