helsingborg-stad/acfservice

Release historycaution

The package has 18 releases with a roughly 16-day median interval, but none in the last 12 months; the long pause raises maintenance concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the broader release pause and increasing abandonment risk.

Security policycaution

No security policy is present. This is a transparency gap, but it is less significant because the repository does use Dependabot.

Workflow auditcaution

All 8 analyzed action references are unpinned, and the release workflow combines workflow_run with an untrusted checkout, creating workflow hygiene and supply-chain exposure. The audit completed without reported high- or medium-severity findings, and no top-level write permissions were found.