smoren/profiler

Release historycaution

The latest release was in December 2022, with no releases in the last 12 months despite the package being over four years old. This is a meaningful maintenance concern, although the six-release history shows the package was previously developed.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that may be dormant. The repository is still available and not archived, which limits the severity.

Security policycaution

The repository has no security policy, leaving reporting and vulnerability-response procedures unclear. This is a modest transparency concern for a dependency, not evidence of a security defect.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.