ssch/t3-tactician

Licensecaution

The manifest declares GPL-2.0+, while the artifact license file is detected as MIT; although license files exist in both artifact and repository, the mismatch needs clarification before adoption.

Release historycaution

The package has existed for about 3 years and 11 months with 9 releases, but only 1 release in the last 12 months indicates a slow release cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, a meaningful sign of recently reduced maintenance activity.

Security policycaution

The repository has no documented security policy, leaving vulnerability-reporting expectations unclear for a package used in application infrastructure.

Workflow auditcaution

All 17 analyzed action references are unpinned, which weakens build reproducibility and exposes workflow dependencies to moving changes; however, the audit found no dangerous triggers, untrusted checkouts, or injection issues.