indy2kro/buxfer-api

Repo commit activitydanger

The repository recorded no commits and no active maintainers during the last three months, consistent with the long release gap and indicating likely abandonment.

Release historycaution

The latest release was about four years ago, with no releases in the last 12 months. Seven releases show some history, but the current gap raises maintenance risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for an HTTP client that handles account credentials.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. Both of its two action references are unpinned, which is a supply-chain hygiene weakness.