joinapi/data-common

Release historydanger

The package has made 5 releases, but none in the last 12 months after its latest release on 2024-12-23, indicating a prolonged release gap for a relatively young package.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, a meaningful maintenance concern that is only partly offset by the more recent push date.

Workflow auditdanger

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; three workflows also grant top-level write permissions, although no untrusted checkout or script injection was found.

Project backingcaution

The registry namespace and repository owner are both joinapi, but the owner is a user account rather than an organization, so this provides limited backing evidence.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and 4 pull requests remain open, suggesting limited recent follow-through.