helsingborg-stad/psr-logger

Release historycaution

The package is only 94 days old and made five releases in roughly one day, with no newer registry release over the following three months. That limited history makes long-term maintenance harder to establish.

Security policycaution

No repository security policy is present, leaving vulnerability reporting and disclosure expectations less transparent for consumers.

Version stabilitycaution

Version 0.2.9 is a normal, non-prerelease release, although it remains below a stable 1.0 major version and therefore may still undergo API change.

Workflow auditcaution

All five workflows were analyzed with no reported audit findings and no top-level write permissions, but both workflow_run workflows check out untrusted content and 11 of 15 action references are unpinned. These are meaningful workflow hygiene and supply-chain concerns, though no script injection was detected.