fond-of-impala/price-lists-rest-api

Release historycaution

The package has had only two releases, with the latest published about three years ago and none in the last 12 months. This materially raises abandonment and freshness concerns.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Together with the old latest release, this is a meaningful maintenance concern.

Repo toolingcaution

The repository uses Make and Composer, but no security-scanning tool was detected. That weakens security-maintenance transparency without proving the package is unsafe.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkout, but all three action references are unpinned. This is a supply-chain hygiene weakness, not a severe risk on its own.