zipavlin/redline

Release historycaution

This is a very young package, 54 days old, with only one release and no established release interval. That limits evidence of sustained maintenance.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance highly dependent on a single person. The repository is user-owned, so no organizational handoff evidence compensates for that concentration.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency for a package handling authentication, reports, screenshots, and videos.

Version stabilitycaution

v0.1.0 is not a stable major release, and the release notes explicitly describe it as an alpha release not safe for production. This indicates a meaningful maturity risk.

Workflow auditcaution

The audit found a high-confidence bot-conditions issue in a pull_request_target workflow, alongside all 9 action references being unpinned and three workflows granting top-level write permissions. No untrusted checkout or script injection was found, so this is a CI hygiene and supply-chain caution rather than a standalone severe verdict.