detect-europe-js

Maintainerscaution

One registry account has publish access. The linked repository is also owned by an individual, so there is no organizational backing shown to compensate for the thin maintainer base.

Release historycaution

The package has had only three releases, with none in the last 12 months; its latest release was nearly two years ago. The roughly 31-day median interval shows an initially active project but does not offset the long current gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating limited current maintenance capacity.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and response, although it is less severe for a small dependency-free package.

Workflow auditcaution

Both analyzed action references are unpinned, and the audit found a high-confidence ad hoc package installation; the reported cache-poisoning pattern is low confidence and therefore only hygiene evidence. No untrusted checkout or script injection was found.