chinayin/italent-openapi-sdk

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, which is consistent with the year-long release gap and increases abandonment risk.

Maintainerscaution

Only one registry account can publish the package, leaving a thin publishing base; the linked repository is user-owned rather than organization-backed, so no compensating organizational capacity is shown.

Release historycaution

The package has 10 releases, but none in the last 12 months; the latest release was about one year ago, which raises maintenance concerns despite an initially fast release cadence.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All 3 analyzed action references are unpinned, creating a workflow supply-chain hygiene gap. The reported cache-poisoning finding has low confidence and is therefore only hygiene, not an independent severe risk.