helsingborg-stad/custom-short-links

Package scaffoldingcaution

The artifact lacks a README, tests, and changelog, which reduces release transparency. The repository file tree nevertheless includes a test file and GitHub Releases are used, partly compensating for the artifact gaps.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, which is a meaningful maintenance concern. The recent release and repository push show current publishing activity but do not fully offset the absence of recent commits.

Repo popularitycaution

The repository has no stars or forks and only 9 watchers, showing limited external adoption. Popularity is supporting evidence, so this lowers confidence in broad community resilience but does not make the package unsafe by itself.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance undocumented. This is a transparency gap, but it is not evidence that the package is unmaintained or unsafe on its own.

Token permissionscaution

The release workflow has no top-level token permissions and relies on job-level permissions, with no read-only top-level declaration. This weakens workflow permission clarity and increases configuration risk.