thesis/dispatcher

Release historycaution

The package has only two releases, both published within about one day, and no release in roughly four months. This is limited evidence of an established maintenance cadence for a young package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens confidence that fixes or improvements will arrive promptly.

Security policycaution

The repository has no security policy. This reduces transparency about how vulnerabilities should be reported, although the package is small and other repository documentation is present.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all 4 of 4 action references are unpinned. That is a supply-chain hygiene gap without evidence of an exploitable workflow path.