aeatech/transaction-manager-bundle

Release historycaution

The package has one release, 1.0.0, published about 8 months ago, with no subsequent releases. That is limited evidence of an established maintenance cadence and lowers confidence in continued support.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, and its latest push was on the release date. This indicates no observed ongoing development.

Security policycaution

The repository has no security policy and no policy file was detected. This is a transparency and maintenance gap, although it is less serious than evidence of unsafe release behavior.

Workflow auditcaution

All 4 analyzed action references are unpinned and the single workflow grants top-level write permissions, creating modest reproducibility and token-scope concerns. No untrusted checkout, script injection, dangerous trigger, or auditor finding was detected, so this is not a severe workflow risk.