thedagofugo/blade-dago-icons

Release historycaution

The package has had no releases in the last 12 months, and its latest recorded release was in September 2024 despite being 761 days old. This indicates meaningful maintenance risk, although four total releases show the project was previously published actively.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent activity to offset the inactivity.

Security policycaution

No security policy was found in the linked repository, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is partly offset by the repository's otherwise complete project structure.

Workflow auditcaution

All 9 analyzed action references are unpinned, creating avoidable build reproducibility and action-update risk. The audit found no untrusted checkout, script injection, or high-severity issue, and two workflows use job-level permissions, so this is a hygiene concern rather than a severe risk.