artisanpack-ui/bing-places

Release historycaution

This is the package's first release, published 0 days ago, so there is no release track record or interval history to demonstrate sustained maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a process gap rather than evidence of an unsafe implementation.

Workflow auditcaution

All 16 analyzed action references are unpinned, which weakens build reproducibility. The audit also found a low-confidence cache-poisoning pattern in the release workflow; no untrusted checkout or script-injection path was found.