factorio-item-browser/export-data

Release historycaution

The package has seven releases since February 2018, but its latest release was in February 2021 and there were no releases in the last year. That long release gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the long gap since the last release. This is meaningful evidence of inactive maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe by itself.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a moderate hygiene concern for a maintained library, though it does not outweigh the stronger maintenance evidence alone.

Workflow auditcaution

The single workflow was fully analyzed with no detected dangerous sinks or high-confidence audit findings, but all 15 action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own; unpinned actions remain a supply-chain hygiene weakness.