technobase/alert

Release historycaution

The package is only about 304 days old and has two releases, both published within roughly 13 hours, so its long-term maintenance record is still limited.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which is a concrete sign that maintenance may have slowed after the initial release.

Repo popularitycaution

The repository has one star and no forks or watchers. Popularity is only supporting evidence, but this very small footprint provides little external evidence of maturity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 11 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; three workflows also grant top-level write permissions. The pull_request_target workflow has no untrusted checkout or script-injection finding, so this is a caution rather than a severe standalone risk.