fond-of-oryx/return-labels-rest-api-company-unit-address-connector

Release historycaution

The package has had only three releases since May 2021, with no release in the last 12 months and a median interval of about 474 days. This indicates slow maintenance and raises abandonment risk, though the latest release is established rather than experimental.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Its push history shows the repository is not archived, but recent development activity is currently absent.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, but it is not evidence of unsafe code by itself.

Workflow auditcaution

All three analyzed action references are unpinned, reducing build reproducibility and increasing exposure to upstream action changes. The workflow has no untrusted checkout, injection, or high-severity audit findings, which limits this to a hygiene concern.