tourze/order-contracts

Release historycaution

This is a young package with only one release, published 318 days ago, so there is little release history to establish long-term maintenance. The stable 1.0.0 version partly offsets the uncertainty.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months. With only one release, this provides weak evidence of ongoing maintenance.

Repo package mentioncaution

The repository name matches the package, but its README does not mention this package and instead describes an arrayable package. That mismatch raises transparency and package-ownership concerns.

Security policycaution

The repository has no security policy. For a small contract package this is a modest transparency gap, but it provides no documented channel for reporting vulnerabilities.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all three referenced actions are unpinned, leaving avoidable workflow supply-chain exposure.