seagm-swoft/stdlib

Release historycaution

There are only 3 releases, all published within about 1 day, with no later releases during the package's roughly 10-month observed age. That gives limited evidence of sustained release maintenance.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers over the last 3 months. With only a single recent release burst, this is weak evidence of ongoing maintenance.

Security policycaution

The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities. This is a transparency and maintenance gap, though not severe on its own.

Workflow auditcaution

Both workflows were analyzed successfully with no trigger or injection findings, but all 5 action uses are unpinned. Unpinned actions weaken build reproducibility and make future workflow changes less controlled.