ads-system/sped-gtin

Release historycaution

The package has only one release, published 791 days ago, with no releases in the last 12 months. That limited history and long inactivity reduce confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the package's extended release inactivity. This is a meaningful abandonment concern despite the repository remaining available.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but it is less serious because the package has clear source and licensing information.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings, untrusted checkouts, or script injections. However, both action references are unpinned, which is a modest reproducibility and supply-chain hygiene gap.