t1gor/robots-txt-parser

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The fresh release and recent pull-request activity partly offset this, but the lack of recent commits still warrants monitoring.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, although the package otherwise shows active development and Dependabot coverage.

Workflow auditcaution

All three workflows were analyzed with no reported audit findings, and two use read-only permissions. However, all nine action references are unpinned and the release workflow has top-level write permissions, creating moderate workflow hygiene and token-scope concerns without an untrusted trigger or sink.