sindhani/hc-external-providers

Release historycaution

Only two releases were published over 668 days, with one release in the last 12 months and a median interval of about 520 days. This indicates a thin release cadence, although the package is not abandoned based on the latest release date.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent package release provides some compensating evidence, but maintenance capacity currently looks limited.

Security policycaution

No security policy is present in the repository. This is a transparency gap for a package that handles external-provider credentials, though it does not by itself show abandonment.

Workflow auditcaution

The audit analyzed all four workflows and found no untrusted checkout or script injection, but all nine action references are unpinned and a high-confidence bot-condition issue was reported in the Dependabot auto-merge workflow. The two workflows with top-level write permissions add to the automation hygiene concern.