ajgl/csv-rfc

Release historydanger

The package has only four releases since February 2016, with no release in more than five years and no releases in the last 12 months. This indicates a mature but inactive project rather than an actively maintained dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long gap since the latest release. No newer activity is provided to offset the maintenance concern.

Security policycaution

The linked repository has no security policy and no security-scanning tools. For a small library this is a transparency and maintenance gap, though it is not evidence of malicious behavior.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous sinks or audit findings, but both of its two action references are unpinned. The absence of a top-level permissions block is acceptable here, while unpinned actions leave avoidable build-integrity risk.