fond-of-impala/company-currency-company-user-carts-rest-api

Release historycaution

This is the only release, published over two years ago, with no releases in the last 12 months. That limits evidence of continued maintenance, although the package is not deprecated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The repository was pushed more recently than the release, but current development activity remains unproven.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a documentation gap rather than evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all three action references are unpinned. That leaves a modest reproducibility and workflow supply-chain hygiene gap.