tuupola/callable-handler

Package scaffoldingcaution

The artifact includes a changelog, while the repository includes tests and a changelog. The missing README reduces consumer documentation, but the source project still provides basic maintenance scaffolding.

Release historycaution

The latest release was published in September 2020, and there have been no releases in the last 12 months. This is a substantial maintenance concern for a package last released about 6 years ago.

Repo commit activitycaution

The repository has had no commits and no active maintainers in the last 3 months, with the last push in May 2022. This supports a risk of abandonment, though the repository is not archived.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, although it is less significant than the package's prolonged inactivity.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 4 action references are unpinned, leaving avoidable build-integrity exposure.