xepozz/feature-flag

Licensecaution

The package declares no license, contains no license file, and the repository also has no license file, leaving the legal terms for dependency use unclear.

Release historycaution

This is the only release, published in July 2023, with no releases in the following 12 months; the long period without a newer release lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating inactive maintenance.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher. This is supporting evidence of a small project, though low popularity alone does not make a stable package unsafe.

Workflow auditcaution

Both workflows were fully analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection paths, but all 5 action references are unpinned, leaving avoidable workflow supply-chain exposure.