shrikeh/teapot

Release historycaution

The package has existed for over 12 years with 12 releases, but no registry release in the last 12 months; its latest release was nearly two years ago. This lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. That is a meaningful maintenance concern, although the recent repository push and stable library scope partly offset it.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence of a vulnerability itself.

Workflow auditcaution

The workflow audit completed all one workflow without finding untrusted checkouts, script injection, or high-severity issues. However, both of its two action references are unpinned, leaving avoidable supply-chain hygiene risk; the absent top-level permissions block is acceptable on its own.