cline/postal-code

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer represents a genuinely narrow visible ownership base.

Release historycaution

The package has 10 releases in about 8 months, but the latest release was about 6 months ago, suggesting activity has slowed since the initial burst.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign that maintenance may have paused after the latest release.

Repo toolingcaution

The repository uses Composer and Just for build tasks, but no security-scanning tools were detected, leaving a modest transparency and review gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 8 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.