spiral/code-style

Name lookalikedanger

The package is reported to borrow the identity of spiral/goridge, which has far more downloads and stable releases; this is strong evidence that consumers may have intended that package instead, despite zero artifact overlap.

Release historycaution

The package has existed for about 7 years with 20 releases, but only one release in the last 12 months; this indicates a mature yet relatively slow release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, a meaningful maintenance warning even though the package has a recent release.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

All six workflows were analyzed with no audit findings or untrusted checkouts, but all 10 action references are unpinned and two workflows grant top-level write permissions; these are workflow hygiene weaknesses without a corroborating exploit path.