dcarbone/soap-plus

Maintainerscaution

There is one registry maintainer, but the repository is owned by the same individual and the package has a long release history. This is a limited bus factor rather than evidence of abandonment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a recent pause in development. This is partly offset by the 4.0.0 release and repository push within the broader recent period.

Security policycaution

The repository has no published security policy. This is a transparency gap, though the package's small scope and other repository tooling limit its impact.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers, untrusted checkouts, or audit findings. However, both of its two action references are unpinned, which is a supply-chain hygiene weakness.