auctane/api

Release historycaution

The package is only 21 days old and has one release, so its maintenance record is not yet established. This is a meaningful maturity concern rather than evidence of abandonment.

Repo bus factorcaution

All recent commit activity comes from one contributor, creating a narrow operational base. Organization backing partly compensates because maintenance can potentially be handed off.

Repo commit activitycaution

There was one commit and one active maintainer in the last three months. That demonstrates recent activity but provides limited evidence of sustained maintenance capacity.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for an integration that handles store and shipping data.

Workflow auditcaution

Both workflows were analyzed without reported audit findings or dangerous untrusted triggers. However, both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.