youcanshop/liquid

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. A recent release and one merged pull request provide some compensating evidence, but the short-term coding inactivity remains a maintenance concern.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is not evidence of a vulnerability by itself.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, or high-severity findings, and neither grants top-level write access. However, all six referenced actions are unpinned, leaving the workflow exposed to upstream action changes.