struzik-vladislav/epp-ext-hostmasterua-uaepp

Maintainerscaution

Only one registry account has publish access. That is consistent with the single-person repository ownership and increases continuity risk, though it is not evidence of unsafe code.

Release historycaution

The package has only 5 releases since 2017 and none in the last 12 months; its latest registry release was about 20 months ago. This is partly offset by a repository commit in the last 3 months, but the release cadence still raises maintenance risk.

Repo bus factorcaution

All recent commits came from one contributor, leaving the project dependent on a single person for ongoing maintenance. The repository is user-owned rather than organization-owned, so there is no provided backing evidence to offset this concentration.

Security policycaution

The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities. This is a documentation gap rather than evidence of a vulnerability.

Workflow auditcaution

The workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings. However, all 3 action references are unpinned, leaving the build exposed to future action changes.