slince/cycle-bundle

Release historydanger

The latest release was over three years ago, with no releases in the last 12 months and only two releases overall. This is strong evidence of an inactive release process.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, reinforcing the long release gap and increasing abandonment risk.

Maintainerscaution

Only one user account has registry publish access. That is a thin publishing base for an independently owned project and offers limited continuity if the maintainer stops work.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it is less significant than the inactivity evidence.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous findings, but all three action references are unpinned. This leaves the build exposed to changing action code despite otherwise clean workflow hygiene.