xepozz/clk-parser

Licensecaution

Neither the package nor the linked repository provides a declared or detected license, creating a real legal and transparency concern for adopters.

Release historycaution

This is the package's only release, published more than two years ago, with no releases in the last 12 months; that leaves maintenance largely unproven.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Repository archivedcaution

The linked repository is not archived, although its last push was more than two years ago and therefore does not offset the inactivity concern.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. All five action references are unpinned, which is a workflow hygiene weakness.