christianjbrown/met-office-weather-datahub-api-sdk

Release historycaution

The package was released today and has only two releases, so there is little evidence of long-term maintenance or release stability.

Repo bus factorcaution

All 31 recent commits came from one contributor, leaving maintenance highly dependent on a single person and providing little evidence of handoff capacity.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkout and injection patterns, but both referenced actions are unpinned, weakening build reproducibility.