import-local

Maintainerscaution

One registry publisher account is a thin publishing base, though the repository is owned by that same individual and the package has a long release history.

Release historycaution

The package has 10 releases since May 2017, but none in the last 12 months; the latest release was about 2 years ago. This suggests slowed maintenance rather than abandonment by itself.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, consistent with the long release gap and creating a real maintenance concern.

Token permissionscaution

The only workflow lacks top-level token permissions, so its effective permissions are less explicit than recommended; no write permissions were detected.