uhifadhi/skeleton

Release historycaution

The package is only 2 days old, despite 16 releases in that period; this shows activity but leaves little evidence of long-term maintenance or release stability.

Repo bus factorcaution

All 89 commits in the last 3 months came from one contributor, creating a meaningful continuity risk; organization ownership provides some capacity for handoff but does not show another active contributor.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a security-sensitive application foundation.

Version stabilitycaution

Version v0.10.15 is not a stable major release, although it is not marked as a prerelease and recent releases have not been prereleases.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings, but all 3 action references are unpinned, weakening build reproducibility.