ryancco/canon

Release historydanger

This is the only release, published in December 2022, with no releases in the last 12 months; the long period without updates raises abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the absence of recent releases and indicating that maintenance has effectively stopped.

Workflow auditdanger

All three workflows were analyzed, but all five action references are unpinned and the audit found two high-confidence issues: spoofable bot conditions and an unpinned container image. The pull_request_target workflow has no untrusted checkout or script-injection sink, limiting the risk.

Security policycaution

The repository has no security policy. This is a transparency gap, though it is less significant for a small package without recent activity than the maintenance evidence.

Version stabilitycaution

Version v0.3 is not a stable major release, so compatibility expectations are weaker, although it is not marked as a prerelease.