tlds

Release historycaution

The project is mature, with 261 releases over more than 12 years, but only one release in the last 12 months indicates a slower update cycle.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. For a mostly data-based package this may reflect annual updates, but it still reduces evidence of active maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four analyzed action references are unpinned, and the workflow uses long-lived registry publishing credentials. No untrusted checkout or script-injection path was found, limiting the risk to workflow hygiene.