sertxudeveloper/blade-icons

Release historycaution

The package has had no registry release in nearly two years and no releases in the last 12 months, indicating a meaningful maintenance concern despite three total releases.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which reinforces the stale release history and raises abandonment concerns.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All five analyzed action references are unpinned, creating avoidable workflow supply-chain drift. One workflow has top-level write permissions and a pull_request_target trigger, but no untrusted checkout, script injection, or audit findings were reported, so this remains a hygiene caution rather than a severe risk.