webcoast/versatile-crawler

Release historycaution

The package has had no registry release in over two years, with 0 releases in the last 12 months. Its six releases since 2017 show some history, but current maintenance appears limited.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, and its latest push was over two years ago. This is a meaningful abandonment risk despite the organization-owned repository.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, with four issues remaining open. This supports the broader picture of limited current activity.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap for a package that processes crawled application content.

Workflow auditcaution

The single workflow uses 2 of 2 unpinned action references, and the audit found two high-confidence template-injection findings. No untrusted checkout or script-injection trigger was reported, so these are workflow hygiene concerns rather than a severe standalone risk.