yocto/yoclib-multibase

Release historycaution

The package has only three releases since November 2021, with no release in the last 12 months and a long median interval of about 463 days. This indicates slow maintenance for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last release having been published in June 2024. This raises maintenance and abandonment concerns.

Security policycaution

The linked repository has no published security policy. For a small library this is a transparency gap, though it is less serious than evidence of unsafe release automation or active security problems.

Workflow auditcaution

The workflow audit completed successfully and found no dangerous triggers, untrusted checkouts, script injection, or findings; read-only permissions are a positive. However, all three action references are unpinned, leaving avoidable build-integrity exposure.