solid/foundation

Release historycaution

The package has made no releases in the last 12 months, and its latest release was in March 2024. This indicates a meaningful maintenance slowdown for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The non-archived repository and prior release history provide some context, but do not offset the current inactivity.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although the package is small and the repository contains tests.

Workflow auditcaution

All three analyzed workflow action references are unpinned, which weakens build reproducibility and exposes the workflow to upstream action changes. The audit found no injection sinks, dangerous triggers, or high-severity findings, so this is a hygiene concern rather than a severe risk.