wepesi/metadata

Release historycaution

The package has had no registry release in more than three years, despite ten releases overall. Earlier releases show initial activity, but the prolonged gap materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no recent maintenance capacity.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is less severe for a small package with a limited dependency surface.

Workflow auditcaution

The single workflow is fully analyzed, uses read-only permissions, and has no dangerous sinks or audit findings. However, both action references are unpinned, leaving a modest reproducibility and workflow-integrity gap.