lasselehtinen/mockingbird-api-client

Release historycaution

This is the first recorded release and the package was published today, so there is no release track record or demonstrated cadence yet. That is expected for a new package but still limits confidence.

Repo commit activitycaution

The repository has no commits in the last 3 months and no active maintainers during that period. Because the package was released today, this is more likely limited history than evidence of abandonment, but maintenance is not yet demonstrated.

Security policycaution

The repository has no security policy. For a client handling OAuth credentials and external API access, that is a modest transparency and maintenance gap.

Version stabilitycaution

The assessed version is v0.1 rather than a stable major release, which signals an early API and maturity stage. It is not marked prerelease, so the concern is limited to its early versioning.

Workflow auditcaution

All 5 workflows were analyzed with no audit findings or untrusted checkouts, but all 12 action references are unpinned and 3 workflows grant top-level write permissions. The pull_request_target trigger has no reported sink, so this is workflow hygiene rather than a severe risk.