elavora/api-datatype-cpf

Release historycaution

The package is about 10 weeks old and has only two releases, so its maintenance record and long-term stability are still limited.

Repo bus factorcaution

One contributor holds all five recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Five commits occurred in the last three months, showing recent activity, but all activity came from one maintainer.

Workflow auditcaution

All 11 action references are unpinned, and one workflow has top-level write access. The high-confidence template-injection finding is a hygiene concern, but no dangerous trigger or untrusted checkout was found.