wizcodepl/scheduled-tasks-health-check

Release historycaution

The package has seven releases, all within its first 138 days, but the latest release was on May 23 and the short history does not yet demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the project is young, this is a meaningful maintenance gap when combined with its brief release history.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with three pull requests still open; this provides limited evidence of active project movement.

Security policycaution

The README asks users to review a security policy, but the repository has no security policy file, leaving vulnerability-reporting guidance incomplete.

Workflow auditcaution

All four workflows were analyzed, but all nine action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not independently dangerous.