addeeandra/vat-calculator

Release historycaution

This is the package's only release, published about 1 year 8 months ago, with no releases in the last 12 months. That leaves limited evidence of ongoing maintenance for a dependency.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the limited maintenance evidence from its single-release history.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although the package's tests, README, and release notes provide some compensating project documentation.

Workflow auditcaution

The single workflow was fully analyzed and has no dangerous audit findings, but all 3 of its 3 action references are unpinned, leaving avoidable build reproducibility and action-update risk.