yard/acf-registrar

Release historycaution

Six releases arrived within the package's first 158 days, but the releases are clustered rather than demonstrating a long, steady maintenance history.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance warning for a package released only recently.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear, though this is a moderate transparency gap rather than evidence of abandonment.

Workflow auditcaution

All five workflow action references are unpinned, and each workflow inherits secrets in a reusable workflow; the audit found no high-severity issues or untrusted checkouts, so this is a workflow-hygiene caution.