spaze/csp-config

Release historycaution

The package has existed for about 7 years and has 19 releases, but only one release in the last 12 months indicates a slower maintenance pace.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful sign of recently slowed maintenance despite a later repository push being recorded elsewhere.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear, though this is a transparency gap rather than an abandonment signal.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but both action references are unpinned, weakening reproducibility and update integrity.