samhk222/tinyurl

Release historydanger

The latest release was nearly three years ago, and there were no releases in the last 12 months. Three releases over the package's lifetime show some history, but not current maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating limited evidence of ongoing maintenance.

Workflow auditdanger

All 8 action references are unpinned, three workflows grant top-level write permissions, and the audit found high-confidence bot-conditions and unpinned-images issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, which limits the risk but does not remove the workflow hygiene concern.