vengine-libs/container

Release historydanger

The package released 62 times in a short initial burst, but has had no release in over a year. That sharp stop is a substantial abandonment concern for a library dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, reinforcing the evidence that maintenance has stopped rather than merely slowed.

Repo popularitycaution

The repository has only 2 stars, 1 fork, and 1 watcher. Low adoption is not harmful by itself, but it provides little evidence of a broad community that could sustain or review the project.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it is less serious than the inactive maintenance signals.

Workflow auditcaution

All 7 analyzed action references are unpinned, which weakens build reproducibility and update control. The audit found no untrusted checkout, script injection, dangerous trigger, or high-confidence workflow finding.