ge-tracker/osrs-api

Release historycaution

The latest release was about 3 years ago, with no releases in the last 12 months. The package had a reasonable earlier cadence of 12 releases and a median interval of about 61 days, but current maintenance appears stalled.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, consistent with the long gap since the last release and indicating a real abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe dependency risk by itself.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a package that handles external API requests.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or high-confidence audit issues. However, all 3 action references are unpinned, so the build remains exposed to changes in referenced actions.