digital-marketing-framework/distributor-csv

Release historycaution

The package has eight releases over roughly three years and a release as recent as February 2026, but only one release appeared in the last 12 months, indicating a modest cadence.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent activity despite the recent release.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance undocumented.

Workflow auditcaution

The complete high-confidence audit found a high-severity unpinned container image, and all four action references are unpinned; the workflow otherwise uses read-only permissions and has no untrusted checkout or script-injection findings.