xiangdangdang/rlp

Release historydanger

The package has had no release in over five years: its latest release was published on August 26, 2021, with zero releases in the last 12 months. This is strong evidence of abandonment risk despite the package not being deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release history showing no recent maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but these values provide no community-maintenance buffer for the long inactivity.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, especially for a library implementing a data encoding format, although it is less significant than the inactivity evidence.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or untrusted checkout and script-injection paths, but all four action references are unpinned. Missing top-level permissions is acceptable here; the unpinned actions remain a modest reproducibility and supply-chain hygiene concern.