your1/tokenizer-x

Release historydanger

Only two releases were published, and none appeared in the last 12 months; the latest release was about 18 months ago. This is strong evidence of abandonment risk for a package intended for ongoing framework use.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, reinforcing the prolonged release gap rather than showing a recently maintained project.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though the available tooling signal shows Dependabot is enabled.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not independently severe.