amethyst/geolocation

Release historydanger

The latest release was published in March 2020, with no releases in the last 12 months despite the package being over six years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving compatibility issues unlikely to receive attention.

Security policycaution

The repository has no security policy and no security-scanning tools were reported elsewhere in the collected repository tooling. This is a transparency and vulnerability-reporting gap, though not as severe as the maintenance lapse.

Version stabilitycaution

Version v0.2.2 is not a stable major release, so its API may still change; the absence of recent releases makes that uncertainty more concerning rather than compensating for it.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts or injection findings, but every action reference is unpinned and the test workflow uses a high-confidence unpinned container image. That weakens build reproducibility and supply-chain hygiene.