vanilla/garden-progress

Release historycaution

Only one release exists, published about three and a half years ago, with no releases in the last 12 months. This suggests the package may be stable, but provides little evidence of ongoing maintenance.

Repository archivedcaution

The linked repository is not archived, although its last push was about three and a half years ago. The active repository status partly offsets, but does not remove, the maintenance concern.

Workflow auditcaution

The workflow uses read-only permissions and has no untrusted checkouts, injection findings, or auditor failures. However, all 6 analyzed action references are unpinned, leaving a supply-chain hygiene gap.