zaghadon/themeboot

Release historydanger

This is the only release, published in August 2020, with no releases in the last 12 months. That long period without updates is strong evidence of abandonment risk for a CLI package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no ongoing maintenance.

Lifecycle scriptscaution

A post-install-cmd script runs during installation, increasing the trust required from consumers. No provided signal shows that this behavior is independently reviewed or constrained.

Repository archivedcaution

The repository is not archived, which avoids the strongest abandonment signal, but its last push was in August 2020 and does not offset the lack of recent activity.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, though not evidence of malicious behavior.