cleaniquecoders/kong-admin-api

Release historycaution

Only three releases have been published since November 2024, with no releases in the past 12 months. The roughly 21-day median interval shows an initially active project, but the subsequent release gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This is a direct maintenance warning, although the later recorded push shows the project is not wholly abandoned.

Security policycaution

The repository has no SECURITY.md or other detected security policy. That is a transparency gap for a package intended to interact with an administrative API, though it does not by itself show unsafe code.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions. The audit also reports a high-confidence bot-conditions finding in the Dependabot auto-merge workflow; there is no untrusted checkout or script-injection finding, so this is workflow hygiene risk rather than a severe supply-chain verdict.