event4u/data-helpers

Licensecaution

The repository contains an MIT license, but the package manifest declares the release as proprietary. That mismatch creates licensing uncertainty for consumers.

Repo bus factorcaution

One contributor made all three recent commits, giving the project a narrow current code-maintenance base. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only three commits were made in the last three months, all during a period with frequent releases. That shows continuing activity but a modest recent maintenance pace.

Workflow auditcaution

All 23 analyzed action references are unpinned, and four workflows grant top-level write permissions. The only audit finding is low-confidence cache-poisoning hygiene, so these are meaningful workflow weaknesses but not a severe standalone risk.