keboola/csvmap

Release historycaution

The package has 29 releases since 2016, but none in the last 12 months; its latest release was nearly two years ago. This suggests slowed maintenance, although the long release history provides maturity evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release gap. The repository remains unarchived and was updated alongside the assessed release, so this is a maintenance concern rather than abandonment proof.

Security policycaution

The linked repository has no security policy, reducing transparency for vulnerability reporting and response. This is a modest gap for a small library, not a severe dependency risk by itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but its only action is unpinned. That leaves a limited build-integrity weakness.