derrickob/pricer

Release historycaution

This package has made one release in 337 days, with no established release cadence. That gives limited evidence of sustained maintenance for a package handling pricing calculations.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. Combined with only one release, this is meaningful evidence of limited recent maintenance.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is less serious than evidence of abandoned code or unsafe release workflows.

Version stabilitycaution

The assessed release is v0.1.0 and is not a stable major release, so the API may still change. It is not marked as a prerelease, which partly offsets the maturity concern.

Workflow auditcaution

Both workflows were analyzed without high- or medium-confidence findings, and no untrusted checkout or script injection was detected. However, all eight action references are unpinned, leaving the build exposed to action changes over time.