devbx/dto

Project backingcaution

The repository is owned by an individual account rather than an organization, so the project has no demonstrated organizational backing to compensate for its thin maintenance evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a young library, that is a meaningful maintenance warning, especially since the latest registry release was about 5 months before collection.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any adoption signal provides little external validation for this young package.

Security policycaution

No repository security policy was found. This reduces transparency for reporting and handling vulnerabilities in a library that processes and maps application data.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all three referenced actions are unpinned. That leaves build behavior exposed to future upstream action changes.