supgeek-rod/faker-zh

Maintainerscaution

A single registry maintainer limits publishing resilience and review capacity, although the linked repository shows the same owner and the package is small.

Release historycaution

The package has had no release in nearly three years and none in the last 12 months, which raises maintenance and abandonment concerns despite five releases overall.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, providing no recent evidence of ongoing maintenance.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities; this is a hygiene gap rather than evidence of an unsafe release.

Workflow auditcaution

The workflow was fully analyzed and uses read-only permissions with no dangerous findings, but both referenced actions are unpinned, leaving them exposed to future upstream changes.