brenoroosevelt/league-route-attribute-provider

Release historycaution

This package has had only one release, published about five years ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance, though a stable 1.0.0 release can still be usable for a small package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being about five years ago. This indicates substantial abandonment risk despite the package's small scope.

Security policycaution

The repository has no security policy. For a small package this is a modest transparency gap, but it provides no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The workflow audit completed successfully with no detected sinks or audit findings, but all four action references are unpinned. That leaves a modest build supply-chain hygiene concern without evidence of an active exploit path.