brotkrueml/coordconverter

Maintainerscaution

Only one registry account has publishing access, leaving a thin release-publishing base. The linked repository shows an identifiable individual owner, but that does not provide the resilience of a broader maintainer team.

Release historycaution

The package has existed since 2018, but only one release appeared in the last 12 months and releases are typically about eight months apart. The recent v3.4.0 release provides some evidence of continued maintenance, but the cadence is slow.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful sign of slowed maintenance, although the recent release and repository push provide partial compensation.

Security policycaution

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, with no provided compensating security process.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or high-confidence audit findings. However, all seven referenced actions are unpinned, leaving avoidable build-integrity exposure.