ambersive/vatvalidator

Release historydanger

The package has had no release in more than six years, with zero releases in the last 12 months. Its seven-release history shows an initially regular cadence but does not compensate for the prolonged release gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This indicates limited current maintenance activity, despite the separate recorded push in January 2025.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting security issues. This is a transparency gap, though it is not by itself evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, and it does not grant top-level write access. However, both of its two action references are unpinned, weakening build reproducibility and supply-chain hygiene.