survos/mobile-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. That is a meaningful maintenance concern, despite the package's otherwise frequent release history.

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention the package. This raises uncertainty about whether the linked source repository directly belongs to this release.

Security policycaution

The repository has no security policy file. This is a transparency and vulnerability-reporting gap, though GitGuardian scanning provides some compensating security tooling.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or auditor findings, but all 5 action references are unpinned. The absence of a top-level permissions block is acceptable here because no write-wide permissions were observed.