antwerpes/data-transfer-object

Release historycaution

The package is 738 days old with seven releases, but only one release in the last 12 months; this points to a slow release cadence rather than active ongoing development.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a concrete sign of limited recent maintenance capacity.

Repo issue activitycaution

There are no open issues and one open pull request, but no issues or pull requests were closed or merged in the last month; this gives little evidence of active project handling.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The audit found a high-confidence bot-condition issue, all eight action references are unpinned, and two workflows grant top-level write permissions. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are workflow hygiene concerns rather than a severe standalone risk.