woohoolabs/larva

Release historycaution

The latest registry release was over 6 years ago, with no releases in the last 12 months. Although the package has an established release history, this strongly lowers confidence in continued maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The non-archived repository and organizational ownership provide context, but do not compensate for the lack of recent development.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified. The package otherwise shows basic project documentation and tooling, limiting this to a transparency concern.

Workflow auditcaution

All 12 analyzed action references are unpinned, which weakens build reproducibility. The workflow has no untrusted checkout, injection, or high-severity findings, so this is a hygiene concern rather than a severe risk.