barbosa89/csv

Release historycaution

Only one release exists, published roughly 14 months ago, with no releases in the last 12 months. This limits evidence of ongoing maintenance, although the repository remains available and unarchived.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. That is a meaningful sign of limited recent maintenance for a package with only one release.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting vulnerabilities, though it is partly offset by the repository using Dependabot scanning.

Workflow auditcaution

All 8 action references are unpinned, three workflows grant top-level write permissions, and the audit found high-confidence bot-conditions and unpinned-images issues. There is no untrusted checkout or script injection, which limits the severity but does not remove the workflow hygiene concern.