joinapi/data-security

Release historycaution

This is the package's only release, published 638 days ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain despite the stable version.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. The repository is not archived, but this recent inactivity weakens evidence of ongoing maintenance.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling vulnerabilities. Dependabot is enabled, which provides some compensating security tooling.

Workflow auditcaution

All 3 workflows grant top-level write access and all 7 action references are unpinned; the audit also found a high-confidence bot-condition issue. There is no untrusted checkout or script injection, so this is a meaningful hygiene concern rather than a severe standalone risk.