enricodelazzari/tempest-query-builder

Release historycaution

This is the package's first and only release, published 57 days ago, so there is limited evidence of release stability and long-term maintenance.

Repo bus factorcaution

Two contributors are active, but one accounts for 80% of recent commits, leaving maintenance somewhat concentrated.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that processes HTTP query input.

Version stabilitycaution

Version 0.1.0 is an early non-stable-major release, which indicates that compatibility and behavior may still change substantially.

Workflow auditcaution

All six workflows were analyzed, but every one of 17 action references is unpinned. A high-confidence bot-conditions finding affects the Dependabot auto-merge workflow, while the pull_request_target trigger has no untrusted checkout or script-injection sink.