fond-of-impala/company-price-list

Release historycaution

The package has had only two releases, with the latest in September 2023 and none in the following 12 months; this is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the measured three-month period, reinforcing the concern raised by the old latest release and indicating limited recent maintenance.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools were detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, high-confidence findings, or incomplete analysis, so this remains a hygiene concern rather than a severe workflow risk.