wearesho-team/token-generator

Release historycaution

The package has only three releases since February 2019, with no release in nearly three years and none in the last 12 months. This indicates limited ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Security policycaution

The repository has no security policy, which is a transparency gap for reporting and handling vulnerabilities, although this is less serious for a small utility with no observed security findings.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous findings, but all four action references are unpinned, leaving build inputs less reproducible and harder to audit over time.