fourdotsix/tenancy-mapping

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has slowed for a young package.

Workflow auditdanger

All 12 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. There are no untrusted checkouts or script injections, but the workflow setup still needs hardening.

Lifecycle scriptscaution

The package uses a post-autoload-dump install-time script. This is worth awareness during installation, but the signal alone does not show an unsafe or excessive lifecycle action.

Release historycaution

This is a young package with one release, first published about ten months ago, so there is little release history to establish long-term maintenance.

Repo issue activitycaution

There are no new issues or merged pull requests in the last month, although two pull requests remain open; this provides limited evidence of active maintenance.