dannyvandersluijs/exact-online-meta-data-tool

Project backingcaution

The repository is owned by an individual matching the registry namespace, so the single registry maintainer is consistent with the project's ownership rather than evidence of organizational backing. This leaves a relatively narrow maintenance base.

Release historycaution

The package has 18 releases over about seven years, but there have been no releases in the last 12 months; the latest release was in December 2024. This weakens confidence in ongoing maintenance despite a historically regular median interval of about 62 days.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a concrete recent-maintenance gap and raises the risk that issues or compatibility changes will go unattended.

Security policycaution

No repository security policy was found. This is a transparency and response-process gap, though it is less severe for a small command-line metadata tool than for a security-sensitive library.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, and it avoids top-level write permissions. However, both action references are unpinned, which weakens build reproducibility and supply-chain control.