dfau/toujou-api

Release historydanger

The package has had no registry release in nearly four years, which raises maintenance and compatibility concerns despite the repository showing recent activity.

Repo bus factorcaution

All four commits in the last three months came from one contributor, leaving little demonstrated redundancy if that contributor becomes unavailable.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in an API framework.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three referenced actions are unpinned, weakening build reproducibility.