zero-to-prod/curl-helper

Release historycaution

The package has four releases over 593 days, but none in the past 12 months, indicating that maintenance has slowed substantially. The recent GitHub release notes provide some transparency but do not offset the current release gap.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is a concrete maintenance warning, although the repository is not archived and the release included documented changes.

Workflow auditcaution

All seven action references are unpinned, and the audit found two high-confidence template-injection findings in annotate.yml. No untrusted checkout or dangerous trigger was reported, so this is a workflow hygiene concern rather than a severe standalone risk.