smeghead/text-link-encoder

Maintainerscaution

One registry maintainer creates a thin publishing base and a higher bus-factor risk, although the linked repository is owned by the same individual and the package is small.

Release historycaution

The package has only four releases and none in nearly three years, which raises maintenance and abandonment concerns despite its relatively short release intervals at the start.

Repo commit activitycaution

The repository shows no commits or active maintainers in the last three months, consistent with inactivity since the November 2023 release and reducing confidence in ongoing maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations unclear; the package's small scope does not fully compensate for that transparency gap.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no reported dangerous findings, but all three action references are unpinned, leaving avoidable build-integrity risk.