wg-vn/trail-log-viewer

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This provides ownership consistency without evidence of a broader maintenance team.

Release historycaution

The package is only 0 days old, with four releases in roughly 7 hours and a median interval of about 2.6 hours. This shows active initial publishing but provides no long-term maintenance evidence.

Repo commit activitycaution

There were no commits and no active maintainers during the last 3 months. Because the repository and package are newly published and were just pushed, this is evidence of unproven maintenance rather than established abandonment.

Security policycaution

The repository has no published security policy. That is a transparency gap for a package that reads, displays, downloads, and deletes application log files.

Workflow auditcaution

All four workflows were analyzed without audit failures or untrusted checkouts, but all nine action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene weaknesses, not severe risks on their own.