ameax/datev-xml

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although releases occurred during the last year, this recent lack of source activity is a maintenance caution.

Security policycaution

No security policy is present in the repository. This is a transparency gap, though it is not evidence that the package is unsafe by itself.

Workflow auditcaution

All 9 analyzed action references are unpinned, and three workflows grant top-level write permissions; the audit also found one high-confidence bot-condition issue. The pull_request_target workflow has no untrusted checkout or script-injection finding, limiting the severity.