zakarialabib/convert-bootstrap-to-tailwind

Release historydanger

The package has only one release, published over three years ago, with no releases in the last 12 months. This is strong evidence of a stagnant release process.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months. Combined with the old registry release, this is a substantial abandonment risk.

Workflow auditdanger

The audit analyzed all five workflows and found a high-confidence bot-conditions issue in a Dependabot auto-merge workflow. All 12 action references are unpinned, and one workflow grants top-level write permissions, increasing workflow supply-chain risk.

Lifecycle scriptscaution

The package runs a post-autoload-dump lifecycle script during installation. This is a supply-chain exposure worth noting, though the signal does not show that the script is unsafe.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single maintainer represents a thin backing structure. This reinforces the maintenance risk but is not evidence of abandonment alone.