@monogrid/gainmap-js

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, a concrete maintenance slowdown that raises abandonment risk.

Maintainerscaution

Only one registry account has publish access, which is a modest operational concentration risk; organization backing partly compensates for the thin registry list.

Repo issue activitycaution

Issue activity was quiet in the last month, but one pull request was opened and two remain open; this is limited evidence of current engagement rather than clear abandonment.

Security policycaution

No security policy is present. This is a transparency gap, though the package otherwise provides provenance and automated dependency scanning.

Workflow auditcaution

All five workflows were analyzed with no audit findings or untrusted checkout and script-injection sinks. However, 36 of 36 action references are unpinned and four workflows grant top-level write permissions, creating workflow hygiene and token-scope concerns.