keboola/codebuilder

Release historycaution

The package has 18 releases over about 12 years, but none in the last 12 months and the latest release was nearly two years ago. This points to limited ongoing maintenance, though the established release history provides some maturity evidence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. This raises abandonment and responsiveness concerns.

Security policycaution

The linked repository has no security policy. That weakens vulnerability-reporting transparency, although the package is small and the workflow audit found no reported security findings.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted-checkout, or audit findings. Its one action is unpinned, which is a minor reproducibility and supply-chain hygiene gap.