yokai/sonata-workflow

Release historycaution

The package has 14 releases over more than eight years, but none in the last 12 months; this indicates a mature yet currently slow release cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, although the repository was pushed after this release; this is a maintenance concern rather than clear abandonment.

Security policycaution

The repository has no published security policy. This reduces vulnerability-reporting transparency, though the package is not deprecated or archived.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 7 action references are unpinned, leaving avoidable supply-chain hygiene risk.