vanilla/knowledge-porter

Licensecaution

No declared license or license file was found in the package or repository, leaving developers without clear reuse terms. This is a real adoption concern for an open-source dependency.

Release historycaution

The package has 20 releases since April 2020, but none in the 12 months before collection and its latest release was nearly two years ago. This indicates materially reduced maintenance activity.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the three months before collection, reinforcing the long release gap. Organization backing is helpful but does not demonstrate current maintenance.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This is a secondary concern alongside the stronger maintenance and licensing gaps.

Workflow auditcaution

The sole workflow has read-only permissions, no untrusted checkout or injection findings, and a complete audit. Both action references are unpinned, however, which weakens reproducibility and supply-chain hygiene.