code-rhapsodie/ezdataflow-bundle

Release historycaution

The package has 16 releases since October 2019, but none in the last 12 months; the latest was about 21 months ago. This is a meaningful maintenance concern for a framework integration.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with no registry release in the last 12 months, this points to reduced ongoing maintenance.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is not by itself evidence that the package is unsafe.

Workflow auditcaution

All three workflows were analyzed with no audit findings and no untrusted checkout or script-injection paths, but all eight action references are unpinned. Two workflows scope permissions at job level, partially offsetting the pinning gap.