brokeyourbike/bvnk-api-client

Release historydanger

This package has had one release, published over three years ago, with no releases in the last 12 months. That is strong evidence of limited ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the stale release history and increasing abandonment risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though it is outweighed by the clear license and available tests.

Workflow auditcaution

All seven analyzed workflow action references are unpinned, and the audit found one high-confidence archived action. No untrusted checkout or script-injection path was found, so this is a meaningful hygiene concern rather than a severe risk.