wyrihaximus/react-cache-fallback

Release historycaution

The package has four releases since September 2018, but none in the last 12 months and the latest release was over five years ago. This is a meaningful maintenance concern for a dependency, despite the stable release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest registry release, this lowers confidence in ongoing maintenance.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but not severe on its own.

Workflow auditcaution

All three workflows were analyzed without failures and have no untrusted checkout or script-injection counts, but all 25 action references are unpinned and the audit found a medium-confidence template-injection issue. These are build-hygiene concerns rather than a severe risk on their own.