labor-digital/max-mind-helpers

Release historydanger

The package has only one release, published over six years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to compensate for the long period without releases.

Repository archivedcaution

The repository is not archived, which preserves a path for future maintenance, but its last push was over six years ago and does not offset the stale release history.

Security policycaution

The linked repository has no security policy. This is a transparency and maintenance gap, especially for a package that downloads and reads an external geolocation database.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkout, or audit findings. However, both of its two action references are unpinned, leaving avoidable build-integrity risk.