toujou/ext-skeleton

Release historycaution

This package has only one release, published about four years ago, with no releases in the last 12 months. That leaves current compatibility and maintenance uncertain.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months. The repository is not archived, but recent activity does not demonstrate active maintenance.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unspecified. This is a modest transparency gap for a small project rather than a severe dependency risk.

Workflow auditcaution

All 8 analyzed action references are unpinned, and the audit found high-confidence use of inherited secrets plus an archived action. Workflows have no top-level permissions block, which is acceptable on its own, but these concrete hygiene issues lower transparency and build safety.