snicco/testable-clock

Release historycaution

The package has 33 releases over about four years, but none in the last 12 months and the latest release is about two years old. This indicates materially reduced maintenance despite its earlier release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Security policycaution

No security policy was found in the repository. This is a transparency and response-process gap, though it is less serious for a small clock utility than for a security-sensitive package.

Version stabilitycaution

The assessed release is v2.0.0-beta.9, so it is a prerelease rather than a finished stable release. The substantial release history partly offsets this, but ongoing beta status remains a compatibility concern.

Workflow auditcaution

The workflow audit completed fully with no findings, and the pull_request_target trigger has no untrusted checkout or script-injection sink. One action reference is unpinned, leaving a minor reproducibility concern.