crawlora/bing

Release historycaution

The package is 0 days old, with 2 releases in about 10 hours. That shows initial activity but provides too little history to establish dependable maintenance.

Repo commit activitycaution

The repository reports 0 commits and 0 active maintainers in the last 3 months. Because the package is brand new, this is partly explained by its age, but it still leaves maintenance capacity unproven.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, though it is not by itself evidence that the package is unsafe.

Version stabilitycaution

Version v0.1.1 is not a stable major release, so the public API may still change substantially even though it is not marked prerelease.

Workflow auditcaution

All 3 workflows use read-only permissions and the audit completed fully, but all 45 action references are unpinned. High-confidence adhoc package installation and trusted-publishing findings in release.yml add release-hygiene concerns; the low-confidence cache findings are only minor hygiene.