themusicdev/edge-cache

Release historycaution

The package is only 0 days old with 2 releases, both published within roughly 11 hours; this shows active initial delivery but provides little evidence of sustained maintenance.

Repo commit activitycaution

The repository reports 0 commits and 0 active maintainers in the last 3 months; because the project is newly released, this is limited evidence rather than proof of abandonment, but it weakens maintenance confidence.

Security policycaution

No repository security policy is present, leaving vulnerability-reporting expectations undocumented; this is a transparency gap, not a standalone dependency blocker.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 4 action references are unpinned, weakening build reproducibility.