iq2i/data-importer

Maintainerscaution

Only one registry account has publishing access, which creates a narrow release channel; the organization-backed repository provides some compensation for that limitation.

Release historycaution

The project has existed since March 2020 with 17 releases, but only one release appeared in the last 12 months, indicating a slower maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a concrete sign of limited current development activity despite the recent release and push.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, dangerous triggers, or audit findings, but all 12 action references are unpinned, weakening build reproducibility.