ziwot/pezos

Release historycaution

The package is about 21 months old but has only one release in the last 12 months, indicating a slow recent cadence. The latest release was published recently enough to provide some continuity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, though the recent release and June repository push provide limited compensating evidence.

Security policycaution

The repository has no published security policy. That weakens vulnerability-reporting transparency for a library, although GitGuardian scanning provides some compensating security practice.

Version stabilitycaution

Version v0.2.3 is still below a stable major release, so compatibility expectations are less certain. It is not marked as a prerelease, which partly offsets that concern.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all 3 of 3 action references are unpinned. Missing top-level permissions is acceptable here, while unpinned actions remain a supply-chain hygiene gap.