dataloader

Release historycaution

The package has existed since 2015 with 11 releases, but it has had no registry release in the last 12 months and its median release interval is about 301 days, indicating slow delivery.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful maintenance concern despite the recent push timestamp and three merged pull requests.

Repo toolingcaution

The project uses Babel and npm scripts, but no security-scanning tooling was detected, leaving a modest transparency and security-hygiene gap.

Token permissionscaution

The only workflow lacks a top-level permissions declaration, so its token permissions are less explicit than preferred; no top-level write permissions were detected.