helsingborg-stad/api-event-manager-integration

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months. This is a meaningful maintenance concern, although the same package released recently and has a long release history.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests during the last month, while 16 issues and 2 pull requests remain open. This indicates limited recent collaboration activity.

Repo popularitycaution

The repository has 3 stars, 5 forks, and 10 watchers. This is limited external popularity, but popularity is supporting evidence and does not outweigh the demonstrated release history.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though the repository does use automated security scanning.

Workflow auditcaution

All three workflows were analyzed without untrusted triggers or script-injection findings, but all 10 action references are unpinned and the build-release workflow uses a floating container image tagged latest. The high-confidence unpinned-image finding is a supply-chain hygiene concern; the low-confidence cache-poisoning finding is weaker evidence.