treehousetim/document

Release historydanger

The package has 16 releases but none in the last 12 months, and the latest release was published in March 2022. This is a meaningful sign of inactivity for a library dependency.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's multi-year release gap. No provided activity signal compensates for this stagnation.

Repo popularitycaution

The repository has 1 star, 1 fork, and 1 watcher, providing little evidence of a broad user or maintainer community. Popularity is supporting evidence rather than decisive on its own, so this is a caution rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency, although it does not by itself make the package unfit.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, which is a modest reproducibility and supply-chain hygiene gap.