thantdev/weight-conversions

Release historydanger

The package has made only three releases, all beginning on April 19, 2022, and none in the last 12 months despite being over four years old. This is strong evidence of a stale release line.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with a project that has not received meaningful maintenance for years.

Workflow auditdanger

All eight action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are serious hygiene concerns rather than a standalone critical risk.

Maintainerscaution

One registry maintainer is consistent with a small user-owned project, but it provides limited publishing redundancy alongside the repository's inactive commit history.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no visible organizational continuity to compensate for the thin maintainer base.